Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194291 2.1 注意 Four Kitchens - Drupal 用 Block Class モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1657 2012-09-20 16:08 2012-03-7 Show GitHub Exploit DB Packet Storm
194292 6.8 警告 Wesley Jones - Drupal 用 Multisite Search モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1656 2012-09-20 16:07 2012-03-7 Show GitHub Exploit DB Packet Storm
194293 4 警告 Sven Decabooter - Drupal 用 UC PayDutchGroup / WeDeal payment モジュールにおけるアカウントの資格情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-1655 2012-09-20 16:06 2012-03-7 Show GitHub Exploit DB Packet Storm
194294 2.1 注意 Alex Barth - Drupal 用 Data モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1654 2012-09-20 16:05 2012-03-7 Show GitHub Exploit DB Packet Storm
194295 6.8 警告 Piwik - Piwik における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4941 2012-09-20 16:04 2011-06-21 Show GitHub Exploit DB Packet Storm
194296 4 警告 OpenStack - OpenStack Keystone における取り消されたロールの特権を保持される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4413 2012-09-20 15:59 2012-09-12 Show GitHub Exploit DB Packet Storm
194297 6.8 警告 FlexCMS - FlexCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1901 2012-09-20 15:31 2012-09-18 Show GitHub Exploit DB Packet Storm
194298 7.5 危険 Digium - Asterisk の main/utils.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1184 2012-09-20 15:30 2012-03-15 Show GitHub Exploit DB Packet Storm
194299 10 危険 ヒューレット・パッカード - HP Operations Orchestration における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-3258 2012-09-20 15:27 2012-09-17 Show GitHub Exploit DB Packet Storm
194300 4.3 警告 シーメンス - Siemens WinCC の WebNavigator におけるユーザ名およびパスワードを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3034 2012-09-20 12:38 2012-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 6.5 MEDIUM
Network
- - The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.27.6 via the template_via_url() functi… CWE-22
Path Traversal
CVE-2025-0859 2025-02-6 19:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1162 - - - Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted da… CWE-88
Argument Injection
CVE-2025-24845 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1163 - - - NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system w… CWE-476
 NULL Pointer Dereference
CVE-2025-24483 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1164 - - - Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product … CWE-120
Classic Buffer Overflow
CVE-2025-23236 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1165 - - - Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of t… CWE-422
CVE-2025-22894 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1166 - - - Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of t… CWE-422
CVE-2025-20094 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1167 - - - An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector. - CVE-2025-24527 2025-02-6 17:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1168 - - - Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system wher… CWE-250
 Execution with Unnecessary Privileges
CVE-2025-22890 2025-02-6 16:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1169 - - - Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX … CWE-798
 Use of Hard-coded Credentials
CVE-2024-51547 2025-02-6 14:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1170 6.5 MEDIUM
Network
- - IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment … CWE-22
Path Traversal
CVE-2025-0799 2025-02-6 10:15 2025-02-6 Show GitHub Exploit DB Packet Storm