Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
187051 2.1 注意 Remote Login Service Hackers - Remote Login Service におけるログイン認証を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0959 2012-11-27 16:50 2012-10-24 Show GitHub Exploit DB Packet Storm
187052 4.4 警告 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6036 2012-11-27 16:48 2012-09-5 Show GitHub Exploit DB Packet Storm
187053 6.9 警告 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-6035 2012-11-27 16:44 2012-09-5 Show GitHub Exploit DB Packet Storm
187054 4.4 警告 シトリックス・システムズ - Xen の Transcendent Memory における制御スタックオペレーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6033 2012-11-27 16:24 2012-09-5 Show GitHub Exploit DB Packet Storm
187055 4.9 警告 シトリックス・システムズ - Xen の Transcendent Memory における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-6032 2012-11-27 16:22 2012-09-5 Show GitHub Exploit DB Packet Storm
187056 4.7 警告 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-6031 2012-11-27 16:21 2012-09-5 Show GitHub Exploit DB Packet Storm
187057 7.2 危険 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-6030 2012-11-27 16:18 2012-09-5 Show GitHub Exploit DB Packet Storm
187058 4.3 警告 Tecnick.com - Nicola Asuni TCExam の admin/code/tce_select_users_popup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4602 2012-11-27 16:12 2012-11-23 Show GitHub Exploit DB Packet Storm
187059 6 警告 Tecnick.com - Nicola Asuni TCExam における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4601 2012-11-27 16:11 2012-11-23 Show GitHub Exploit DB Packet Storm
187060 4.6 警告 シトリックス・システムズ - Xen のグラフィカルコンソールにおける重要なホストリソース情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-4411 2012-11-27 16:11 2012-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 4.3 MEDIUM
Network
- - The WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_set… New CWE-862
 Missing Authorization
CVE-2024-12164 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
152 6.4 MEDIUM
Network
- - The Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_brand' sh… New CWE-79
Cross-site Scripting
CVE-2024-11746 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
153 4.3 MEDIUM
Network
- - The Houzez Property Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.21. This is due to missing or incorrect nonce validation on the "de… New CWE-352
 Origin Validation Error
CVE-2025-0808 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm
154 6.1 MEDIUM
Network
- - The StaffList plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing or incorrect nonce validation on the 'stafflist' pag… New CWE-79
Cross-site Scripting
CVE-2024-13749 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm
155 6.4 MEDIUM
Network
- - The Liveticker (by stklcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'liveticker' shortcode in all versions up to, and including, 1.2.2 due to insufficient … New CWE-79
Cross-site Scripting
CVE-2024-13701 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm
156 5.3 MEDIUM
Network
- - The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorder_route() function in all versi… New CWE-862
 Missing Authorization
CVE-2024-13554 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm
157 4.3 MEDIUM
Network
- - The aDirectory – WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the adqs_delete_listing() function in all vers… New CWE-862
 Missing Authorization
CVE-2024-13541 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm
158 5.3 MEDIUM
Network
- - The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-interface/phpunit.php file being publicly … New CWE-209
Information Exposure Through an Error Message
CVE-2024-13539 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm
159 - - - Dell BSAFE SSL-J contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to a Denial of Service. New CWE-833
 Deadlock
CVE-2024-29172 2025-02-12 11:15 2025-02-12 Show GitHub Exploit DB Packet Storm
160 - - - Dell BSAFE SSL-J contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure. New CWE-295
Improper Certificate Validation 
CVE-2024-29171 2025-02-12 11:15 2025-02-12 Show GitHub Exploit DB Packet Storm