Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 7, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192471 3.6 注意 eXtplorer - eXtplorer における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3454 2012-08-9 16:26 2012-08-7 Show GitHub Exploit DB Packet Storm
192472 3.6 注意 Debian - logol における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3453 2012-08-9 16:22 2012-08-7 Show GitHub Exploit DB Packet Storm
192473 3.3 注意 GNOME Project - gnome-screensaver における無人のワークステーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3452 2012-08-9 16:20 2012-08-7 Show GitHub Exploit DB Packet Storm
192474 3.6 注意 Open vSwitch - Open vSwitch における任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3449 2012-08-9 16:12 2012-08-7 Show GitHub Exploit DB Packet Storm
192475 4.3 警告 KDE project - KDE PIM における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-16
環境設定 		CVE-2012-3413 2012-08-9 16:10 2012-08-7 Show GitHub Exploit DB Packet Storm
192476 4.3 警告 ヒューレット・パッカード - HP Network Node Manager i におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2022 2012-08-9 15:45 2012-08-2 Show GitHub Exploit DB Packet Storm
192477 7.5 危険 Ganglia - Ganglia Web における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3448 2012-08-9 11:48 2012-08-6 Show GitHub Exploit DB Packet Storm
192478 2.6 注意 Puppet - Puppet および Puppet Enterprise におけるエージェントを偽装される脆弱性 CWE-287
不適切な認証 		CVE-2012-3408 2012-08-9 11:42 2012-08-6 Show GitHub Exploit DB Packet Storm
192479 7.5 危険 シーメンス - Siemens Synco OZW Web Server における管理者のアクセス権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-3020 2012-08-9 11:32 2012-08-1 Show GitHub Exploit DB Packet Storm
192480 5 警告 Bitcoin Project - bitcoind および Bitcoin-Qt におけるサービス運用妨害 (プロセスハング) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3789 2012-08-9 11:28 2012-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 7, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 - - - An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to insufficient enforcement of password complexity requirements. The app… - CVE-2025-22390 2025-01-4 12:15 2025-01-4 Show GitHub Exploit DB Packet Storm
132 - - - An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate uploaded files. This allow… - CVE-2025-22389 2025-01-4 12:15 2025-01-4 Show GitHub Exploit DB Packet Storm
133 - - - An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This expos… - CVE-2025-22387 2025-01-4 12:15 2025-01-4 Show GitHub Exploit DB Packet Storm
134 - - - An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors t… - CVE-2025-22384 2025-01-4 11:15 2025-01-4 Show GitHub Exploit DB Packet Storm
135 - - - A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewal… - CVE-2024-3393 2025-01-4 11:00 2024-12-27 Show GitHub Exploit DB Packet Storm
136 - - - A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minus_cart.php. The… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0199 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
137 4.3 MEDIUM
Network 		- - IBM PowerHA SystemMirror for i 7.4 and 7.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to … - CVE-2024-55897 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
138 5.4 MEDIUM
Network 		- - IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames.  This vulnerability could allow an attacker to gain improper access and perform unauthori… CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2024-55896 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
139 4.3 MEDIUM
Network 		- - The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justifi… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-12237 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
140 7.3 HIGH
Network 		- - The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. This is due to the software allowing users to execute … CWE-94
Code Injection 		CVE-2024-11733 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm