Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1921 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2021-46968 2025-01-15 16:43 2021-04-21 Show GitHub Exploit DB Packet Storm
1922 8.8 重要
Network 		Nuggethon Custom Order Statuses for WooCommerce Nuggethon の WordPress 用 Custom Order Statuses for WooCommerce におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-25930 2025-01-15 16:33 2024-02-29 Show GitHub Exploit DB Packet Storm
1923 8.8 重要
Network 		rymera Auto Refresh Single Page rymera の WordPress 用 Auto Refresh Single Page における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-1731 2025-01-15 16:12 2024-03-5 Show GitHub Exploit DB Packet Storm
1924 5.5 警告
Local 		south river technologies webdrive South River Technologies の WebDrive におけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2024-1192 2025-01-15 16:05 2024-02-29 Show GitHub Exploit DB Packet Storm
1925 7.8 重要
Local 		クアルコム SC8180XP-ACAF ファームウェア
snapdragon 7c compute platform ファームウェア
fastconnect 6900 ファームウェア
SC8180X-AAAB ファームウェア
SC8180X+SDX55 ファームウェア
AQT1000&nb… 		複数のクアルコム製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-43541 2025-01-15 15:57 2023-09-19 Show GitHub Exploit DB Packet Storm
1926 8.1 重要
Adjacent 		Huawei WS7290-15 ファームウェア
WS8002-10 ファームウェア
WS8502-10 ファームウェア
WS8700-10 ファームウェア
WS8001-10 ファームウェア
WS8500-10 ファームウェア
PT9030-15 ファームウェア
WS8000-10 ファ… 		複数の Huawei 製品における脆弱性 CWE-420
CWE-noinfo
CVE-2023-52718 2025-01-15 15:55 2024-12-28 Show GitHub Exploit DB Packet Storm
1927 5.5 警告
Local 		アドビシステムズ Adobe Acrobat DC
Adobe Acrobat
Adobe Acrobat Reader DC 		アドビの Adobe Reader および Acrobat における境界外読み取りの CWE-125
境界外読み取り 		CVE-2022-44517 2025-01-15 15:48 2022-04-12 Show GitHub Exploit DB Packet Storm
1928 8.1 重要
Adjacent 		Huawei WS7200-10 ファームウェア
WS7206-10 ファームウェア
TC7001-10 ファームウェア 		複数の Huawei 製品における脆弱性 CWE-420
CWE-noinfo
CVE-2023-7266 2025-01-15 15:47 2024-12-28 Show GitHub Exploit DB Packet Storm
1929 7.5 重要
Network 		Alan Clarke urlite Alan Clarke の Node.js 用 urlite における非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
CWE-20
CVE-2023-51931 2025-01-15 15:45 2023-12-26 Show GitHub Exploit DB Packet Storm
1930 4.3 警告
Adjacent 		Huawei HUAWEI 4G Router B612 ファームウェア Huawei の HUAWEI 4G Router B612 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-124
CWE-787
CVE-2020-9086 2025-01-15 15:41 2020-02-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 8.8 HIGH
Network 		backie option_editor The Option Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the plugin_page() function. This makes it possible for un… Update CWE-352
 Origin Validation Error 		CVE-2024-13852 2025-02-22 00:50 2025-02-18 Show GitHub Exploit DB Packet Storm
132 4.3 MEDIUM
Network 		kevinbrent wprequal The Mortgage Lead Capture System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.2.10. This is due to missing or incorrect nonce validation on… Update CWE-352
 Origin Validation Error 		CVE-2025-0796 2025-02-22 00:47 2025-02-18 Show GitHub Exploit DB Packet Storm
133 5.4 MEDIUM
Network 		mlcalc mortgage_loan_calculator The Mortgage Calculator / Loan Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mlcalc' shortcode in all versions up to, and including, 1.5.20 due to ins… Update CWE-79
Cross-site Scripting 		CVE-2025-0805 2025-02-22 00:46 2025-02-18 Show GitHub Exploit DB Packet Storm
134 4.3 MEDIUM
Network 		speedsize speedsize_image_\&_video_ai-optimizer The SpeedSize Image & Video AI-Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce valida… Update CWE-352
 Origin Validation Error 		CVE-2024-13438 2025-02-22 00:44 2025-02-18 Show GitHub Exploit DB Packet Storm
135 8.8 HIGH
Network 		shopwarden shopwarden The Shopwarden – Automated WooCommerce monitoring & testing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.11. This is due to missing or in… Update CWE-352
 Origin Validation Error 		CVE-2024-13315 2025-02-22 00:44 2025-02-18 Show GitHub Exploit DB Packet Storm
136 5.4 MEDIUM
Network 		shenyanzhi memorialday The MemorialDay plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on a function. This … Update CWE-352
 Origin Validation Error 		CVE-2024-13523 2025-02-22 00:41 2025-02-18 Show GitHub Exploit DB Packet Storm
137 9.8 CRITICAL
Network 		wecantrack affiliate_links The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization … Update CWE-502
 Deserialization of Untrusted Data 		CVE-2024-13556 2025-02-22 00:41 2025-02-18 Show GitHub Exploit DB Packet Storm
138 6.1 MEDIUM
Network 		clavaque s2member The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use o… Update CWE-79
Cross-site Scripting 		CVE-2024-11376 2025-02-22 00:38 2025-02-18 Show GitHub Exploit DB Packet Storm
139 5.4 MEDIUM
Network 		vcita online_payments_-_get_paid_with_paypal\
_square_\&_stripe 		The Online Payments – Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.20.0 … Update CWE-79
Cross-site Scripting 		CVE-2024-11895 2025-02-22 00:36 2025-02-18 Show GitHub Exploit DB Packet Storm
140 5.4 MEDIUM
Network 		magazine3 web_stories_enhancer The Web Stories Enhancer – Level Up Your Web Stories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'web_stories_enhancer' shortcode in all versions up to, and inc… Update CWE-79
Cross-site Scripting 		CVE-2024-13575 2025-02-22 00:35 2025-02-18 Show GitHub Exploit DB Packet Storm