Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
186941 3.5 注意 Christian Johansson - Drupal 用 Restrict node page view モジュールにおける未公開のノードにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4473 2012-12-4 16:21 2012-07-11 Show GitHub Exploit DB Packet Storm
186942 5.1 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおける任意の PHP コードを実行される脆弱性 CWE-Other
その他
CVE-2012-4472 2012-12-4 16:20 2012-07-11 Show GitHub Exploit DB Packet Storm
186943 5 警告 Dominique CLAUSE - Drupal 用 Search Autocomplete モジュールにおけるオートコンプリートを無効される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4471 2012-12-4 16:19 2012-07-11 Show GitHub Exploit DB Packet Storm
186944 7.5 危険 Philip Ludlam - Drupal 用 Listhandler モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4470 2012-12-4 16:13 2012-07-11 Show GitHub Exploit DB Packet Storm
186945 2.6 注意 Simon Rycroft - Drupal 用 Hashcash モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4469 2012-12-4 15:17 2012-06-21 Show GitHub Exploit DB Packet Storm
186946 4.3 警告 Privatemsg Project - Drupal 用 Privatemsg モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4468 2012-12-4 15:16 2012-06-20 Show GitHub Exploit DB Packet Storm
186947 2.1 注意 Python Software Foundation - Python Keyring におけるパスワードを取得される脆弱性 CWE-310
暗号の問題
CVE-2012-4571 2012-12-4 14:30 2012-11-20 Show GitHub Exploit DB Packet Storm
186948 7.5 危険 libssh - libssh におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4560 2012-12-4 14:27 2012-11-20 Show GitHub Exploit DB Packet Storm
186949 7.5 危険 PS Project Management Team - libunity-webapps におけるサービス運用妨害 (メモリ破損およびクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-4551 2012-12-4 14:25 2012-11-28 Show GitHub Exploit DB Packet Storm
186950 5 警告 IBM - IBM WebSphere Portal の theme コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-4834 2012-12-4 14:12 2012-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 9.8 CRITICAL
Network
presslayouts pressmart The PressMart - Modern Elementor WooCommerce WordPress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.16. This is due to the softwa… Update CWE-94
Code Injection
CVE-2024-13797 2025-02-21 21:17 2025-02-18 Show GitHub Exploit DB Packet Storm
172 6.1 MEDIUM
Network
wpexperts post_smtp The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the from and subject parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization a… Update CWE-79
Cross-site Scripting
CVE-2025-0521 2025-02-21 21:16 2025-02-18 Show GitHub Exploit DB Packet Storm
173 7.3 HIGH
Network
- - A vulnerability was found in Baiyi Cloud Asset Management System 8.142.100.161. It has been classified as critical. This affects an unknown part of the file /wuser/admin.ticket.close.php. The manipul… New CWE-89
CWE-74
SQL Injection
Injection
CVE-2025-1535 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm
174 6.4 MEDIUM
Network
- - The WP-Appbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's appbox shortcode in all versions up to, and including, 4.5.4 due to insufficient input sanitization an… New CWE-79
Cross-site Scripting
CVE-2025-1489 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm
175 5.3 MEDIUM
Network
- - The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajax_ticket_delete' function in all versions up to, and in… New CWE-862
 Missing Authorization
CVE-2025-1402 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm
176 - - - Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abus… New - CVE-2024-9150 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm
177 4.1 MEDIUM
Network
- - The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Adm… New CWE-94
Code Injection
CVE-2024-13900 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm
178 4.9 MEDIUM
Network
- - The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on t… New CWE-89
SQL Injection
CVE-2024-13846 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm
179 6.5 MEDIUM
Network
- - The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.3.1 due to insufficient escaping on the user suppl… New CWE-89
SQL Injection
CVE-2024-13713 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm
180 6.4 MEDIUM
Network
- - The igumbi Online Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'igumbi_calendar' shortcode in all versions up to, and including, 1.40 due to insufficient… New CWE-79
Cross-site Scripting
CVE-2024-13455 2025-02-21 21:15 2025-02-21 Show GitHub Exploit DB Packet Storm