Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188051 5 警告 ocPortal - ocPortal の catalogue_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1471 2012-10-3 17:02 2012-03-21 Show GitHub Exploit DB Packet Storm
188052 4.3 警告 ocPortal - ocPortal の code_editor.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1470 2012-10-3 17:01 2012-03-21 Show GitHub Exploit DB Packet Storm
188053 2.1 注意 stickynote project - Drupal 用 stickynote モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5233 2012-10-3 16:57 2012-01-17 Show GitHub Exploit DB Packet Storm
188054 4.3 警告 stickynote project - Drupal 用 stickynote モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1636 2012-10-3 16:56 2012-01-17 Show GitHub Exploit DB Packet Storm
188055 4.3 警告 OneOrZero - OneOrZero AIMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0989 2012-10-3 16:54 2012-10-1 Show GitHub Exploit DB Packet Storm
188056 4.3 警告 Quickl Form - Joomla! 用 Quickl Form コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5232 2012-10-3 16:53 2012-10-1 Show GitHub Exploit DB Packet Storm
188057 7.5 危険 miniCMS - miniCMS における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-5231 2012-10-3 16:51 2012-10-1 Show GitHub Exploit DB Packet Storm
188058 7.5 危険 Jextensions - Joomla! 用 JE Story Submit コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-5230 2012-10-3 16:46 2012-10-1 Show GitHub Exploit DB Packet Storm
188059 4.3 警告 Slideshow Gallery 2 - WordPress 用 Slideshow Gallery2 プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5229 2012-10-3 16:46 2012-10-1 Show GitHub Exploit DB Packet Storm
188060 4.3 警告 Tincan - phplist の admin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5228 2012-10-3 16:45 2012-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
101 - - - Cross-Site Request Forgery (CSRF) vulnerability in thunderbax WP Admin Custom Page allows Stored XSS. This issue affects WP Admin Custom Page: from n/a through 1.5.0. New CWE-352
 Origin Validation Error
CVE-2025-25072 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
102 - - - Cross-Site Request Forgery (CSRF) vulnerability in topplugins Vignette Ads allows Stored XSS. This issue affects Vignette Ads: from n/a through 0.2. New CWE-352
 Origin Validation Error
CVE-2025-25071 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
103 - - - in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free. New CWE-416
 Use After Free
CVE-2025-0304 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
104 - - - in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow. New CWE-120
Classic Buffer Overflow
CVE-2025-0303 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
105 - - - in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow. New CWE-190
 Integer Overflow or Wraparound
CVE-2025-0302 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
106 - - - A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather). The vulnerability is present in the Product … New - CVE-2025-1077 2025-02-7 18:15 2025-02-7 Show GitHub Exploit DB Packet Storm
107 - - - Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malici… New - CVE-2025-22880 2025-02-7 17:15 2025-02-7 Show GitHub Exploit DB Packet Storm
108 4.3 MEDIUM
Network
- - The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-ele… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-13841 2025-02-7 16:15 2025-02-7 Show GitHub Exploit DB Packet Storm
109 - - - A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2. A denial of service co… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-1072 2025-02-7 13:15 2025-02-7 Show GitHub Exploit DB Packet Storm
110 - - - Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with r… New CWE-80
Basic XSS
CVE-2025-22402 2025-02-7 12:15 2025-02-7 Show GitHub Exploit DB Packet Storm