Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187731 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3653 2012-10-17 13:47 2012-07-25 Show GitHub Exploit DB Packet Storm
187732 6.8 警告 アップル - 複数の Apple 製品で使用される Webkit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3654 2012-10-17 13:42 2012-09-13 Show GitHub Exploit DB Packet Storm
187733 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3652 2012-10-17 13:40 2012-09-13 Show GitHub Exploit DB Packet Storm
187734 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3651 2012-10-17 13:38 2012-09-13 Show GitHub Exploit DB Packet Storm
187735 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-3646 2012-10-17 12:28 2012-07-25 Show GitHub Exploit DB Packet Storm
187736 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-3645 2012-10-17 11:18 2012-07-25 Show GitHub Exploit DB Packet Storm
187737 5 警告 アップル
Google		 - 複数の製品で使用される Webkit における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3067 2012-10-17 10:59 2012-04-5 Show GitHub Exploit DB Packet Storm
187738 9.3 危険 ComponentOne
Open Automation Software		 - ComponentOne FlexGrid におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0227 2012-10-16 17:21 2012-10-12 Show GitHub Exploit DB Packet Storm
187739 4.3 警告 アップル - 複数の Apple 製品で使用される WebKit における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3696 2012-10-16 15:40 2012-07-25 Show GitHub Exploit DB Packet Storm
187740 5 警告 アップル - 複数の Apple 製品で使用される WebKit における URL 内のドメイン名になりすまされる脆弱性 CWE-Other
その他 		CVE-2012-3693 2012-10-16 15:36 2012-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
681 - - - The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the titleTag parameter in all versions up to, and including, 3.6 due to insuf… CWE-79
Cross-site Scripting 		CVE-2025-0506 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
682 - - - The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameter in all versions up to, and including, 5.0.20 … CWE-89
SQL Injection 		CVE-2024-13473 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
683 - - - The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied param… CWE-89
SQL Injection 		CVE-2024-13435 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
684 - - - The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through t… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-13365 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
685 - - - A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/updateroutin… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1188 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
686 - - - The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory. Thi… CWE-922
 Insecure Storage of Sensitive Information 		CVE-2024-12315 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
687 - - - A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Control/Api/Api.php. The manipulation of the argument… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2025-1186 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
688 - - - A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor_Graph. The manipulation leads to sql in… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1185 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
689 - - - The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and including, 10.10. This is due to the plugin not properl… CWE-285
Improper Authorization 		CVE-2024-13821 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
690 - - - The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly … CWE-693
 Protection Mechanism Failure 		CVE-2024-13794 2025-02-13 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm