Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188191 7.5 危険 Neturf - Neturf eCommerce Shopping Cart の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-5198 2012-09-26 12:24 2012-09-23 Show GitHub Exploit DB Packet Storm
188192 6.8 警告 Public Knowledge Project - Public Knowledge Project Open Harvester Systems におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5197 2012-09-26 12:23 2012-09-23 Show GitHub Exploit DB Packet Storm
188193 6.8 警告 Public Knowledge Project - Public Knowledge Project Open Journal Systems におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5196 2012-09-26 12:23 2012-09-23 Show GitHub Exploit DB Packet Storm
188194 6.8 警告 Public Knowledge Project - Public Knowledge Project Open Conference Systems におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5195 2012-09-26 12:22 2012-09-23 Show GitHub Exploit DB Packet Storm
188195 4.3 警告 Tribulant Software - WordPress 用 Whois Search プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5194 2012-09-26 12:21 2012-01-1 Show GitHub Exploit DB Packet Storm
188196 4.3 警告 Tribulant Software - WordPress 用 Whois Search プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5193 2012-09-26 12:21 2012-01-1 Show GitHub Exploit DB Packet Storm
188197 4.3 警告 Caseproof - WordPress 用 Pretty Link Lite プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5192 2012-09-26 12:20 2012-01-6 Show GitHub Exploit DB Packet Storm
188198 4.3 警告 Caseproof - WordPress 用 Pretty Link Lite プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5191 2012-09-26 12:20 2011-12-12 Show GitHub Exploit DB Packet Storm
188199 7.5 危険 Jextn - Joomla! 用の JE FAQ Pro コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3211 2012-09-25 17:38 2010-09-3 Show GitHub Exploit DB Packet Storm
188200 7.5 危険 martin lee - Multi-lingual E-Commerce System における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-3210 2012-09-25 17:38 2010-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 6.5 MEDIUM
Network
- - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability New CWE-1222
CVE-2025-21283 2025-02-7 08:15 2025-02-7 Show GitHub Exploit DB Packet Storm
162 6.5 MEDIUM
Network
- - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability New CWE-843
Type Confusion
CVE-2025-21279 2025-02-7 08:15 2025-02-7 Show GitHub Exploit DB Packet Storm
163 4.4 MEDIUM
Local
- - Microsoft Edge (Chromium-based) Spoofing Vulnerability New CWE-358
 Improperly Implemented Security Check for Standard
CVE-2025-21267 2025-02-7 08:15 2025-02-7 Show GitHub Exploit DB Packet Storm
164 5.3 MEDIUM
Network
- - Microsoft Edge for IOS and Android Spoofing Vulnerability New CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2025-21253 2025-02-7 08:15 2025-02-7 Show GitHub Exploit DB Packet Storm
165 8.7 HIGH
Network
- - Server-Side Request Forgery (SSRF) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network. New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2025-21177 2025-02-7 08:15 2025-02-7 Show GitHub Exploit DB Packet Storm
166 3.1 LOW
Network
- - A vulnerability classified as problematic was found in Mindskip xzs-mysql ????????? 3.9.0. Affected by this vulnerability is an unknown functionality of the component CORS Handler. The manipulation l… New CWE-346
CWE-942
 Origin Validation Error
 Permissive Cross-domain Policy with Untrusted Domains
CVE-2025-1083 2025-02-7 08:15 2025-02-7 Show GitHub Exploit DB Packet Storm
167 3.5 LOW
Network
- - A vulnerability classified as problematic has been found in Mindskip xzs-mysql ????????? 3.9.0. Affected is an unknown function of the file /api/admin/question/edit of the component Exam Edit Handler… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2025-1082 2025-02-7 08:15 2025-02-7 Show GitHub Exploit DB Packet Storm
168 - - - An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect_path parameter of the login redirection functi… New - CVE-2024-57609 2025-02-7 07:15 2025-02-7 Show GitHub Exploit DB Packet Storm
169 - - - Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted… New - CVE-2024-57392 2025-02-7 07:15 2025-02-7 Show GitHub Exploit DB Packet Storm
170 - - - An issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute arbitrary code via the modelsbyom.py component. New - CVE-2024-55241 2025-02-7 07:15 2025-02-7 Show GitHub Exploit DB Packet Storm