Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194221 5 警告 アップル - Apple Mac OS X の Profile Manager における管理対象のデバイスを列挙される脆弱性 CWE-287
不適切な認証 		CVE-2012-3721 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194222 4.6 警告 アップル - Apple Mac OS X における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-3723 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194223 5 警告 GNOME Project - libsoup の SoupServer の soup-uri.c におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2524 2012-09-24 17:05 2011-06-23 Show GitHub Exploit DB Packet Storm
194224 3.3 注意 Wireshark - SPARC および Itanium で稼働する Wireshark におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2394 2012-09-24 17:04 2012-05-21 Show GitHub Exploit DB Packet Storm
194225 3.3 注意 Wireshark - Wireshark の DIAMETER 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2393 2012-09-24 17:04 2012-05-21 Show GitHub Exploit DB Packet Storm
194226 3.3 注意 Wireshark - Wireshark におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2392 2012-09-24 17:02 2012-05-21 Show GitHub Exploit DB Packet Storm
194227 2.9 注意 Wireshark - Wireshark の NFS dissector におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4049 2012-09-24 16:58 2012-07-22 Show GitHub Exploit DB Packet Storm
194228 3.3 注意 Wireshark - Wireshark の PPP dissector におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4048 2012-09-24 16:56 2012-07-22 Show GitHub Exploit DB Packet Storm
194229 7.5 危険 日立 - JP1/Cm2/Network Node Manager i におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-5001 2012-09-21 18:14 2012-02-29 Show GitHub Exploit DB Packet Storm
194230 4.3 警告 KnowledgeTree - KnowledgeTree の config/dmsDefaults.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0988 2012-09-21 16:06 2012-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1111 - - - The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against … - CVE-2024-13099 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1112 - - - The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be … - CVE-2024-13098 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1113 - - - The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against h… - CVE-2024-13097 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1114 - - - The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored … - CVE-2024-13096 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1115 - - - The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow user… - CVE-2024-12768 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1116 - - - The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only mean… - CVE-2025-0938 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1117 - - - reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as `penetration_tester` or `auditor` t… CWE-284
Improper Access Control 		CVE-2025-24968 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1118 - - - reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. An attacker can exp… CWE-79
Cross-site Scripting 		CVE-2025-24967 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1119 - - - reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary … CWE-79
Cross-site Scripting 		CVE-2025-24966 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1120 - - - Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site W… CWE-1385
 Missing Origin Validation in WebSockets 		CVE-2025-24964 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm