Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187661 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における Web Client の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3161 2012-10-19 16:20 2012-10-16 Show GitHub Exploit DB Packet Storm
187662 4 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における ATTACH の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3154 2012-10-19 16:16 2012-10-16 Show GitHub Exploit DB Packet Storm
187663 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM For Process における Supply Chain Relationship Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3140 2012-10-19 16:12 2012-10-16 Show GitHub Exploit DB Packet Storm
187664 4.3 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Portal Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3230 2012-10-19 15:59 2012-10-16 Show GitHub Exploit DB Packet Storm
187665 4 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Siebel Documentation の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3229 2012-10-19 15:56 2012-10-16 Show GitHub Exploit DB Packet Storm
187666 2.1 注意 オラクル - Oracle Virtualization の Oracle VM Virtual Box における VirtualBox Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3221 2012-10-19 15:50 2012-10-16 Show GitHub Exploit DB Packet Storm
187667 4.3 警告 オラクル - Oracle Virtualization の Secure Global Desktop における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1685 2012-10-19 15:49 2012-10-16 Show GitHub Exploit DB Packet Storm
187668 4.3 警告 オラクル - Oracle E-Business Suite の Oracle iStore における Web interface の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-5058 2012-10-19 15:48 2012-10-16 Show GitHub Exploit DB Packet Storm
187669 5 警告 オラクル - Oracle E-Business Suite の Oracle iRecruitment における Signon の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3222 2012-10-19 15:47 2012-10-16 Show GitHub Exploit DB Packet Storm
187670 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Human Resources における PDF 生成の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3196 2012-10-19 15:46 2012-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 6.5 MEDIUM
Network 		- - The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to in… New CWE-89
SQL Injection 		CVE-2024-13341 2025-02-1 16:15 2025-02-1 Show GitHub Exploit DB Packet Storm
132 6.4 MEDIUM
Network 		- - The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table Widget's searchab… New CWE-79
Cross-site Scripting 		CVE-2024-11829 2025-02-1 16:15 2025-02-1 Show GitHub Exploit DB Packet Storm
133 8.8 HIGH
Network 		- - The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including, 4.8.7 via the get_svg() function. This makes it possible f… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2025-0366 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm
134 6.5 MEDIUM
Network 		- - The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature. This makes it possible for authenticated attackers… New CWE-22
Path Traversal 		CVE-2025-0365 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm
135 - - - The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against … New - CVE-2024-13099 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm
136 - - - The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be … New - CVE-2024-13098 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm
137 - - - The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against h… New - CVE-2024-13097 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm
138 - - - The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored … New - CVE-2024-13096 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm
139 - - - The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow user… New - CVE-2024-12768 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm
140 5.3 MEDIUM
Network 		- - The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 vi… New CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor 		CVE-2024-12041 2025-02-1 15:15 2025-02-1 Show GitHub Exploit DB Packet Storm