Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188241 4.3 警告 osCSS - osCSS の admin/currencies.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2856 2012-09-25 17:38 2010-07-24 Show GitHub Exploit DB Packet Storm
188242 6.8 警告 jared meeker - EVH の modfile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2855 2012-09-25 17:38 2010-07-12 Show GitHub Exploit DB Packet Storm
188243 2.6 注意 jared meeker - EVH の modfile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2854 2012-09-25 17:38 2010-07-24 Show GitHub Exploit DB Packet Storm
188244 7.5 危険 iScripts - iScripts VisualCaster の flashPlayer/playVideo.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2853 2012-09-25 17:38 2010-07-24 Show GitHub Exploit DB Packet Storm
188245 7.5 危険 OrdaSoft - Joomla! 用の BookLibrary From Same Author コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2851 2012-09-25 17:38 2010-07-24 Show GitHub Exploit DB Packet Storm
188246 6.8 警告 nusoftware - nuBuilder の productionnu2/fileuploader.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2850 2012-09-25 17:38 2010-07-24 Show GitHub Exploit DB Packet Storm
188247 4.3 警告 nusoftware - nuBuilder の productionnu2/nuedit.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2849 2012-09-25 17:38 2010-07-24 Show GitHub Exploit DB Packet Storm
188248 4.3 警告 newanz - Newanz NewsOffice の news_show.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2844 2012-09-25 17:38 2010-07-24 Show GitHub Exploit DB Packet Storm
188249 6.8 警告 Thomas E. Dickey - Lynx の WWW/Library/Implementation/HTParse.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2810 2012-09-25 17:38 2010-08-20 Show GitHub Exploit DB Packet Storm
188250 2.6 注意 joachim fritschi - phpCAS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2796 2012-09-25 17:38 2010-08-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
561 7.5 HIGH
Network 		- - The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insu… CWE-89
SQL Injection 		CVE-2024-13478 2025-02-19 21:15 2025-02-19 Show GitHub Exploit DB Packet Storm
562 - - - Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be written to Apache error log file accessible … - CVE-2025-1075 2025-02-19 19:15 2025-02-19 Show GitHub Exploit DB Packet Storm
563 7.5 HIGH
Network 		- - The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due … CWE-89
SQL Injection 		CVE-2024-13489 2025-02-19 19:15 2025-02-19 Show GitHub Exploit DB Packet Storm
564 - - - A vulnerability exists in ChurchCRM 5.13.0. and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based and time-based blind SQL Injection vulnerability in the Ba… - CVE-2025-1135 2025-02-19 18:15 2025-02-19 Show GitHub Exploit DB Packet Storm
565 - - - A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based and time-based blind SQL Injection vulnerability in the Don… - CVE-2025-1134 2025-02-19 18:15 2025-02-19 Show GitHub Exploit DB Packet Storm
566 - - - A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based blind SQL Injection vulnerability in the EditEventAttendees… - CVE-2025-1133 2025-02-19 18:15 2025-02-19 Show GitHub Exploit DB Packet Storm
567 - - - A time-based blind SQL Injection vulnerability exists in the ChurchCRM 5.13.0 and prior EditEventAttendees.php within the EN_tyid parameter. The parameter is directly inserted into an SQL query witho… - CVE-2025-1132 2025-02-19 18:15 2025-02-19 Show GitHub Exploit DB Packet Storm
568 - - - A vulnerability exists in ChurchCRM 5.13.0 that allows an attacker to execute arbitrary JavaScript in a victim's browser via Reflected Cross-Site Scripting (XSS) in the EditEventAttendees.php page. T… - CVE-2025-1024 2025-02-19 18:15 2025-02-19 Show GitHub Exploit DB Packet Storm
569 - - - In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/{namespace}/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details… - CVE-2025-1007 2025-02-19 18:15 2025-02-19 Show GitHub Exploit DB Packet Storm
570 5.3 MEDIUM
Network 		- - The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the site_ads_files_reset() and cls_file_reset() functions in all versions up to, and inc… CWE-862
 Missing Authorization 		CVE-2024-13364 2025-02-19 18:15 2025-02-19 Show GitHub Exploit DB Packet Storm