Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194611 6.9 警告 CelFrame - CelFrame Office 2008 における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5207 2012-09-10 14:12 2012-09-6 Show GitHub Exploit DB Packet Storm
194612 6.9 警告 e-press - e-press ONE Office E-NoteTaker および E-Zip における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5206 2012-09-10 14:11 2012-09-6 Show GitHub Exploit DB Packet Storm
194613 6.9 警告 e-press - e-press ONE Office Author における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5205 2012-09-10 14:09 2012-09-6 Show GitHub Exploit DB Packet Storm
194614 6.9 警告 IBM - IBM Lotus Symphony における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5204 2012-09-10 13:54 2012-09-6 Show GitHub Exploit DB Packet Storm
194615 6.9 警告 NCP engineering - 複数の NCP 製品における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5203 2012-09-10 13:52 2012-09-6 Show GitHub Exploit DB Packet Storm
194616 6.9 警告 JetAudio - JetAudio における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5202 2012-09-10 13:51 2012-09-6 Show GitHub Exploit DB Packet Storm
194617 6.9 警告 MAGIX - MAGIX Samplitude Producer における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5201 2012-09-10 13:50 2012-09-6 Show GitHub Exploit DB Packet Storm
194618 6.9 警告 Dominik Reichl - KeePass Password Safe における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5200 2012-09-10 13:49 2012-09-6 Show GitHub Exploit DB Packet Storm
194619 6.9 警告 Nova Development - PhotoImpact X3 における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5199 2012-09-10 13:47 2012-09-6 Show GitHub Exploit DB Packet Storm
194620 6.9 警告 Intuit - Intuit QuickBooks における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5198 2012-09-10 13:46 2012-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1241 - - - The Zalomení WordPress plugin through 1.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even w… - CVE-2024-12872 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1242 - - - The Canvasflow for WordPress plugin through 1.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used again… - CVE-2024-12275 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1243 6.4 MEDIUM
Network
- - The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler ' shortcode in all versions up to, and includin… CWE-79
Cross-site Scripting
CVE-2024-11886 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1244 6.4 MEDIUM
Network
- - The Ticketmeo – Sell Tickets – Event Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.3.6 due to insuffi… CWE-79
Cross-site Scripting
CVE-2025-0507 2025-01-31 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1245 9.8 CRITICAL
Network
- - The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions up to, and including, 4.2.14 via the t… CWE-22
Path Traversal
CVE-2025-0493 2025-01-31 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1246 5.4 MEDIUM
Network
- - The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and i… CWE-79
Cross-site Scripting
CVE-2024-10867 2025-01-31 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1247 6.1 MEDIUM
Network
- - The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the title parameter in all versions up to, and includi… CWE-79
Cross-site Scripting
CVE-2025-0470 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1248 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory. - CVE-2024-47900 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1249 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. - CVE-2024-47899 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1250 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. - CVE-2024-47898 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm