Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188571 7.5 危険 kjetiltroan - WebMaid CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1266 2012-09-25 17:38 2010-04-6 Show GitHub Exploit DB Packet Storm
188572 7.5 危険 IBM - IBM Web Interface for Content Management における脆弱性 CWE-noinfo
情報不足 		CVE-2010-1243 2012-09-25 17:38 2010-03-31 Show GitHub Exploit DB Packet Storm
188573 4.3 警告 IBM - IBM Web Interface for Content Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1242 2012-09-25 17:38 2010-03-31 Show GitHub Exploit DB Packet Storm
188574 5 警告 MoinMoin - MoinMoin における textcha の保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1238 2012-09-25 17:38 2010-04-5 Show GitHub Exploit DB Packet Storm
188575 9.3 危険 マイクロソフト - Microsoft Virtual PC 2007 などの Virtual Machine Monitor におけるデータ漏洩保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1225 2012-09-25 17:38 2010-04-1 Show GitHub Exploit DB Packet Storm
188576 4.3 警告 mm forum - TYPO3 用の mm_forum エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1218 2012-09-25 17:38 2010-03-30 Show GitHub Exploit DB Packet Storm
188577 4.3 警告 je form creator - Joomla! 用の JE Form Creator コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1217 2012-09-25 17:38 2010-03-30 Show GitHub Exploit DB Packet Storm
188578 6.8 警告 notsopureedit - notsoPureEdit の templates/template.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1216 2012-09-25 17:38 2010-03-30 Show GitHub Exploit DB Packet Storm
188579 5 警告 Mozilla Foundation - Bugzilla の Search.pm におけるタイムトラッキング情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1204 2012-09-25 17:38 2010-06-24 Show GitHub Exploit DB Packet Storm
188580 4.3 警告 ikiwiki - ikiwiki の htmlscrubber コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1195 2012-09-25 17:38 2010-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1051 - - - The Social Share Buttons for WordPress plugin through 2.7 allows an unauthenticated user to upload arbitrary images and change the path where they are uploaded - CVE-2024-13117 2025-02-4 00:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1052 - - - The Crelly Slider WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks … - CVE-2024-13116 2025-02-4 00:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1053 - - - SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during use… - CVE-2024-57522 2025-02-3 22:15 2025-02-3 Show GitHub Exploit DB Packet Storm
1054 - - - No proper validation of the length of user input in http_server_get_content_type_from_extension. - CVE-2024-10395 2025-02-3 16:15 2025-02-3 Show GitHub Exploit DB Packet Storm
1055 - - - nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c. - CVE-2025-25066 2025-02-3 15:15 2025-02-3 Show GitHub Exploit DB Packet Storm
1056 - - - An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they do not contain potentially dangerous SV… - CVE-2025-25063 2025-02-3 13:15 2025-02-3 Show GitHub Exploit DB Packet Storm
1057 - - - An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor 5 rich text editor is used. This allows … - CVE-2025-25062 2025-02-3 13:15 2025-02-3 Show GitHub Exploit DB Packet Storm
1058 - - - In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed… - CVE-2025-20637 2025-02-3 13:15 2025-02-3 Show GitHub Exploit DB Packet Storm
1059 - - - In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User… - CVE-2025-20636 2025-02-3 13:15 2025-02-3 Show GitHub Exploit DB Packet Storm
1060 - - - In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional… - CVE-2025-20635 2025-02-3 13:15 2025-02-3 Show GitHub Exploit DB Packet Storm