Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187691 2.1 注意 オラクル - Oracle Solaris 11 における Vino server の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3205 2012-10-19 11:38 2012-10-16 Show GitHub Exploit DB Packet Storm
187692 7.2 危険 オラクル - Oracle Solaris 11 における Power Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3204 2012-10-19 11:37 2012-10-16 Show GitHub Exploit DB Packet Storm
187693 2.1 注意 オラクル - Oracle Solaris 11 における Gnome Display Manager の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3203 2012-10-19 11:35 2012-10-16 Show GitHub Exploit DB Packet Storm
187694 7.2 危険 オラクル - Oracle Solaris 10 および 11 における Gnome Trusted Extension の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3199 2012-10-19 11:34 2012-10-16 Show GitHub Exploit DB Packet Storm
187695 7.8 危険 オラクル - Oracle Solaris 11 における COMSTAR の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3189 2012-10-19 11:33 2012-10-16 Show GitHub Exploit DB Packet Storm
187696 6.9 警告 オラクル - Oracle Solaris 10 における Kernel の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3187 2012-10-19 11:32 2012-10-16 Show GitHub Exploit DB Packet Storm
187697 3.6 注意 オラクル - Oracle Solaris における mailx の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3165 2012-10-19 11:30 2012-10-16 Show GitHub Exploit DB Packet Storm
187698 5 警告 サン・マイクロシステムズ
オラクル		 - Oracle GlassFish Server および Sun Java System Application Server における CORBA ORB の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3155 2012-10-19 11:28 2012-10-16 Show GitHub Exploit DB Packet Storm
187699 3.3 注意 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足 		CVE-2012-3151 2012-10-18 18:17 2012-10-16 Show GitHub Exploit DB Packet Storm
187700 2.1 注意 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足 		CVE-2012-3146 2012-10-18 18:16 2012-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 7.5 HIGH
Network 		wpmessiah safe_ai_malware_protection_for_wp The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db() function in all versions up to, and includ… New CWE-862
 Missing Authorization 		CVE-2024-12269 2025-02-1 04:44 2025-01-30 Show GitHub Exploit DB Packet Storm
82 6.5 MEDIUM
Network 		villatheme w2s The W2S – Migrate WooCommerce to Shopify plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.2.1 via the 'viw2s_view_log' AJAX action. This makes it poss… New NVD-CWE-noinfo
CVE-2024-12861 2025-02-1 04:01 2025-01-30 Show GitHub Exploit DB Packet Storm
83 5.4 MEDIUM
Network 		proxymis html5_chat The HTML5 chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'HTML5CHAT' shortcode in all versions up to, and including, 1.04 due to insufficient input sanitizati… New CWE-79
Cross-site Scripting 		CVE-2024-12451 2025-02-1 03:55 2025-01-30 Show GitHub Exploit DB Packet Storm
84 5.4 MEDIUM
Network 		wpdispensary wp_dispensary The WP Dispensary plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpd_menu' shortcode in all versions up to, and including, 4.5.0 due to insufficient input sanitiz… New CWE-79
Cross-site Scripting 		CVE-2024-12444 2025-02-1 03:45 2025-01-30 Show GitHub Exploit DB Packet Storm
85 6.1 MEDIUM
Network 		shoalsummitsolutions team_rosters The Team Rosters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 4.7 due to insufficient input sanitization and outp… New CWE-79
Cross-site Scripting 		CVE-2024-12320 2025-02-1 03:25 2025-01-30 Show GitHub Exploit DB Packet Storm
86 6.1 MEDIUM
Network 		bowo system_dashboard The System Dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Filename parameter in all versions up to, and including, 2.8.15 due to insufficient input sanitizatio… New CWE-79
Cross-site Scripting 		CVE-2024-12299 2025-02-1 03:22 2025-01-30 Show GitHub Exploit DB Packet Storm
87 4.3 MEDIUM
Network 		ecpay ecpay_ecommerce_for_woocommerce The ECPay Ecommerce for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'clear_ecpay_debug_log' AJAX action in all versions up to,… New CWE-862
 Missing Authorization 		CVE-2024-13652 2025-02-1 03:21 2025-01-30 Show GitHub Exploit DB Packet Storm
88 8.1 HIGH
Network 		aakashbhagat single_user_chat The Single-user-chat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the 'single_user_chat_update_login'… New NVD-CWE-noinfo
CVE-2024-13646 2025-02-1 03:19 2025-01-30 Show GitHub Exploit DB Packet Storm
89 6.1 MEDIUM
Network 		stageshow_project stageshow The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 9.8… New CWE-79
Cross-site Scripting 		CVE-2024-13705 2025-02-1 03:17 2025-01-30 Show GitHub Exploit DB Packet Storm
90 6.5 MEDIUM
Network 		modalsurvey wordpress_survey_and_poll The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'survey' shortcode in all versions up to, an… New CWE-89
SQL Injection 		CVE-2024-13596 2025-02-1 03:16 2025-01-30 Show GitHub Exploit DB Packet Storm