Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188451 7.5 危険 jtmreseller - Joomla! 用の JTM Reseller コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1877 2012-09-25 17:38 2010-05-12 Show GitHub Exploit DB Packet Storm
188452 7.5 危険 jvehicles - Joomla! 用の Jvehicles コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1873 2012-09-25 17:38 2010-05-12 Show GitHub Exploit DB Packet Storm
188453 5 警告 The PHP Group - PHP の html_entiry_decode 関数におけるメモリ破壊を引き起こされる脆弱性 CWE-200
情報漏えい
CVE-2010-1860 2012-09-25 17:38 2010-05-6 Show GitHub Exploit DB Packet Storm
188454 4.3 警告 マイクロソフト - Microsoft Internet Explorer における特定の人物および製品検索を特定される脆弱性 CWE-200
情報漏えい
CVE-2010-1852 2012-09-25 17:38 2010-05-7 Show GitHub Exploit DB Packet Storm
188455 7.5 危険 Joomla! - Joomla! 用の Newsfeeds における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1739 2012-09-25 17:38 2010-05-6 Show GitHub Exploit DB Packet Storm
188456 4.9 警告 マイクロソフト - Microsoft Windows 2000 などのカーネルの win32k.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1735 2012-09-25 17:38 2010-05-6 Show GitHub Exploit DB Packet Storm
188457 4.9 警告 マイクロソフト - Microsoft Windows 2000 などのカーネルの win32k.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1734 2012-09-25 17:38 2010-05-6 Show GitHub Exploit DB Packet Storm
188458 6.8 警告 OCS Inventory Team - OCS Inventory NG における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1733 2012-09-25 17:38 2010-05-6 Show GitHub Exploit DB Packet Storm
188459 6.8 警告 joomlacomponent.inetlanka - Joomla! 用の iNetLanka Contact Us Draw Root Map におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1723 2012-09-25 17:38 2010-05-4 Show GitHub Exploit DB Packet Storm
188460 6.8 警告 moto-treks - Joomla! 用の mtfireeagle コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1719 2012-09-25 17:38 2010-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1181 6.4 MEDIUM
Network
- - The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'theme_options_ajax_post_… CWE-862
 Missing Authorization
CVE-2024-13769 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1182 6.4 MEDIUM
Network
- - The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization … CWE-79
Cross-site Scripting
CVE-2024-13665 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1183 6.4 MEDIUM
Network
- - The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versions up to, and including, 3.2.1 due to i… CWE-79
Cross-site Scripting
CVE-2024-13658 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1184 8.1 HIGH
Network
- - The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check … CWE-862
 Missing Authorization
CVE-2024-13656 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1185 8.1 HIGH
Network
- - The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the… CWE-862
 Missing Authorization
CVE-2024-13654 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1186 8.8 HIGH
Network
- - The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on th… CWE-862
 Missing Authorization
CVE-2024-13653 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1187 9.8 CRITICAL
Network
- - The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed… CWE-266
 Incorrect Privilege Assignment
CVE-2024-13421 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1188 4.3 MEDIUM
Network
- - The WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_set… CWE-862
 Missing Authorization
CVE-2024-12164 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1189 6.4 MEDIUM
Network
- - The Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_brand' sh… CWE-79
Cross-site Scripting
CVE-2024-11746 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1190 4.3 MEDIUM
Network
- - The Houzez Property Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.21. This is due to missing or incorrect nonce validation on the "de… CWE-352
 Origin Validation Error
CVE-2025-0808 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm