Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
187631 4.9 警告 オラクル - Oracle Fusion Middleware の Oracle Fusion Middleware における Advanced UI の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3183 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
187632 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirect の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3175 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
187633 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Reports Developer における Servlet の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3153 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
187634 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Fusion Middleware における Report Server Component の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3152 2012-10-19 18:07 2012-10-16 Show GitHub Exploit DB Packet Storm
187635 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Installation の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1686 2012-10-19 18:06 2012-10-16 Show GitHub Exploit DB Packet Storm
187636 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirects の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0518 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
187637 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0108 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
187638 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0107 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
187639 4.9 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0106 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
187640 2.1 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0095 2012-10-19 17:41 2012-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
691 8.8 HIGH
Network
- - The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification. This vulnerability can lead to privilege escalation and denial of ser… New CWE-862
 Missing Authorization
CVE-2024-13643 2025-02-11 17:15 2025-02-11 Show GitHub Exploit DB Packet Storm
692 - - - rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a l… Update - CVE-2025-24898 2025-02-11 17:15 2025-02-4 Show GitHub Exploit DB Packet Storm
693 9.8 CRITICAL
Network
- - The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.7. This is due to the plugin not properly validating a user's… New CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2025-0181 2025-02-11 16:15 2025-02-11 Show GitHub Exploit DB Packet Storm
694 9.8 CRITICAL
Network
- - The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3. This is due to the plugin not properly restricting what user meta can be update… New CWE-269
 Improper Privilege Management
CVE-2025-0180 2025-02-11 16:15 2025-02-11 Show GitHub Exploit DB Packet Storm
695 5.0 MEDIUM
Network
- - A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads t… New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2025-1179 2025-02-11 16:15 2025-02-11 Show GitHub Exploit DB Packet Storm
696 6.3 MEDIUM
Network
- - A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function import_add of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads … New CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data
CVE-2025-1177 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
697 5.0 MEDIUM
Network
- - A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to h… New CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow
CVE-2025-1176 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
698 - - - A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The… New CWE-89
CWE-74
SQL Injection
Injection
CVE-2025-1172 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
699 - - - A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/Customer… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2025-1171 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
700 - - - NetVision Information ISOinsight has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser through phish… New CWE-79
Cross-site Scripting
CVE-2025-1145 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm