Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194661 9.3 危険 TWD Industries - Remote-Anything の Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4057 2012-07-30 11:20 2012-07-25 Show GitHub Exploit DB Packet Storm
194662 7.5 危険 Uiga - Uiga Personal Portal の index2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4056 2012-07-30 11:11 2012-07-25 Show GitHub Exploit DB Packet Storm
194663 7.5 危険 Uiga - Uiga FanClub の index2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4055 2012-07-30 11:09 2012-07-25 Show GitHub Exploit DB Packet Storm
194664 6.9 警告 CPE17 - CPE17 Autorun Killer の readfile 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4054 2012-07-30 11:04 2012-07-25 Show GitHub Exploit DB Packet Storm
194665 3.5 注意 Oleg Kovalchuk - Drupal 用の cctags モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2310 2012-07-30 11:03 2012-05-2 Show GitHub Exploit DB Packet Storm
194666 3.5 注意 Propeople - Drupal 用の Glossify Internal Links Auto SEO モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2309 2012-07-30 11:03 2012-05-2 Show GitHub Exploit DB Packet Storm
194667 3.5 注意 tahiticlic - Drupal 用の Taxonomy Grid : Catalog モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2308 2012-07-30 11:01 2012-05-2 Show GitHub Exploit DB Packet Storm
194668 6.8 警告 Willem Van Der Plaat - Drupal 用の Addressbook モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2307 2012-07-30 11:00 2012-05-2 Show GitHub Exploit DB Packet Storm
194669 7.5 危険 Willem Van Der Plaat - Drupal 用の Addressbook モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2306 2012-07-30 10:59 2012-05-2 Show GitHub Exploit DB Packet Storm
194670 6.8 警告 Justin Ellison - Drupal 用の Node Gallery モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2305 2012-07-30 10:50 2012-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Explara Explara Membership allows Reflected XSS. This issue affects Explara Membership: from n/a … New CWE-79
Cross-site Scripting
CVE-2025-23583 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
272 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Custom CSS Addons allows Reflected XSS. This issue affects Custom CSS Addons: from n/a t… New CWE-79
Cross-site Scripting
CVE-2025-23578 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
273 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound XLSXviewer allows Path Traversal. This issue affects XLSXviewer: from n/a through 2.1.1. New CWE-22
Path Traversal
CVE-2025-23562 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
274 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bilal TAS Responsivity allows Reflected XSS. This issue affects Responsivity: from n/a through 0.… New CWE-79
Cross-site Scripting
CVE-2025-23548 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
275 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in clickandsell REAL WordPress Sidebar allows Stored XSS. This issue affects REAL WordPress Sidebar:… New CWE-79
Cross-site Scripting
CVE-2025-23535 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
276 - - - Missing Authorization vulnerability in Team118GROUP Team 118GROUP Agent allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Team 118GROUP Agent: from n/a throu… New CWE-862
 Missing Authorization
CVE-2025-23512 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
277 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound HyperComments allows Reflected XSS. This issue affects HyperComments: from n/a through 0… New CWE-79
Cross-site Scripting
CVE-2025-23509 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
278 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blrt Blrt WP Embed allows Reflected XSS. This issue affects Blrt WP Embed: from n/a through 1.6.9. New CWE-79
Cross-site Scripting
CVE-2025-23507 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
279 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP IMAP Auth allows Reflected XSS. This issue affects WP IMAP Auth: from n/a through 4.0… New CWE-79
Cross-site Scripting
CVE-2025-23506 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
280 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Customizable Captcha and Contact Us allows Reflected XSS. This issue affects Customizabl… New CWE-79
Cross-site Scripting
CVE-2025-23503 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm