Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 12:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194821 4.3 警告 Moodle - Moodle の mod/lti/typessettings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3389 2012-07-25 13:35 2012-07-23 Show GitHub Exploit DB Packet Storm
194822 4 警告 Moodle - Moodle の lib/accesslib.php における機能チェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3388 2012-07-25 12:28 2012-07-23 Show GitHub Exploit DB Packet Storm
194823 4 警告 Moodle - Moodle におけるエイリアスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3387 2012-07-25 12:22 2012-07-23 Show GitHub Exploit DB Packet Storm
194824 4.3 警告 ESET
マカフィー
AVG Technologies
Jiangmin
Norman
FRISK Software International
VirusBlokAda
クイックヒール・テクノロジーズ・ジャパン株式会社
エフ・セキュア
G Data Software
AVAST Software s.r.o.
Beijing Rising International Software
Panda Security
カスペルスキ
- 複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1459 2012-07-25 11:09 2012-03-21 Show GitHub Exploit DB Packet Storm
194825 4.3 警告 ClamAV
ソフォス
- ClamAV および Sophos Anti-Virus の Microsoft CHM ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1458 2012-07-25 11:08 2012-03-21 Show GitHub Exploit DB Packet Storm
194826 4.3 警告 ESET
マカフィー
AVG Technologies
Jiangmin
Norman
FRISK Software International
VirusBlokAda
クイックヒール・テクノロジーズ・ジャパン株式会社
G Data Software
AVAST Software s.r.o.
Beijing Rising International Software
カスペルスキー
Avira
Emsisoft
シマン
- 複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1457 2012-07-25 11:06 2012-03-21 Show GitHub Exploit DB Packet Storm
194827 4.4 警告 Puppet - Puppet および Puppet Enterprise における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1054 2012-07-25 11:02 2012-05-29 Show GitHub Exploit DB Packet Storm
194828 6.9 警告 Puppet - Puppet および Puppet Enterprise の change_user メソッドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1053 2012-07-25 11:00 2012-05-29 Show GitHub Exploit DB Packet Storm
194829 7.5 危険 The PHP Group - PHP の php_variables.c 内の php_register_variable_ex 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-0830 2012-07-24 18:02 2012-02-1 Show GitHub Exploit DB Packet Storm
194830 7.5 危険 PNG Development Group - libpng の pngerror.c におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-189
数値処理の問題
CVE-2011-3464 2012-07-24 16:44 2012-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Orbisius Simple Notice allows Stored XSS. This issue affects Orbisius S… New CWE-79
Cross-site Scripting
CVE-2025-24634 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
192 - - - Missing Authorization vulnerability in silverplugins217 Build Private Store For Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Build Private S… New CWE-862
 Missing Authorization
CVE-2025-24633 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
193 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Linnea Huxford, LinSoftware Blur Text allows Stored XSS. This issue affects Blur Text: from n/a t… New CWE-79
Cross-site Scripting
CVE-2025-24627 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
194 - - - Missing Authorization vulnerability in Marco Almeida | Webdados Taxonomy/Term and Role based Discounts for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This is… New CWE-862
 Missing Authorization
CVE-2025-24625 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
195 - - - Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Security Really Simple SSL allows Cross Site Request Forgery. This issue affects Really Simple SSL: from n/a through 9.1.4. New CWE-352
 Origin Validation Error
CVE-2025-24623 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
196 - - - Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Job Board Manager allows Cross Site Request Forgery. This issue affects Job Board Manager: from n/a through 2.1.59. New CWE-352
 Origin Validation Error
CVE-2025-24622 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
197 - - - Missing Authorization vulnerability in ElementInvader ElementInvader Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ElementInvader Ad… New CWE-862
 Missing Authorization
CVE-2025-24618 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
198 - - - Missing Authorization vulnerability in Foliovision FV Thoughtful Comments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FV Thoughtful Comments: from n/a … New CWE-862
 Missing Authorization
CVE-2025-24613 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
199 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Smackcoders WP Ultimate Exporter allows Absolute Path Traversal. This issue affects WP Ultimate Exporte… New CWE-22
Path Traversal
CVE-2025-24611 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
200 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Christian Leuenberg, L.net Web Solutions Restrict Anonymous Access allows Stored XSS. This issue … New CWE-79
Cross-site Scripting
CVE-2025-24610 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm