Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194831 6.9 警告 Google - Tunnelblick における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3486 2012-08-29 11:49 2012-08-26 Show GitHub Exploit DB Packet Storm
194832 7.2 危険 Google - Tunnelblick における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3485 2012-08-29 11:48 2012-08-26 Show GitHub Exploit DB Packet Storm
194833 7.2 危険 Google - Tunnelblick におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3484 2012-08-29 11:47 2012-08-26 Show GitHub Exploit DB Packet Storm
194834 6.2 警告 Google - Tunnelblick の runScript 関数における権限を取得される脆弱性 CWE-362
競合状態 		CVE-2012-3483 2012-08-29 11:35 2012-08-26 Show GitHub Exploit DB Packet Storm
194835 5 警告 Munin - Munin の munin-cgi-graph におけるサービス運用妨害 (ディスク消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4678 2012-08-29 11:25 2012-04-27 Show GitHub Exploit DB Packet Storm
194836 2.1 注意 Creative Commons module Project - Drupal 用 Creative Commons モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2297 2012-08-29 11:20 2012-04-25 Show GitHub Exploit DB Packet Storm
194837 5 警告 Munin - Munin の munin-cgi-graph におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2147 2012-08-29 11:17 2012-08-26 Show GitHub Exploit DB Packet Storm
194838 4.3 警告 Elixir - Elixir における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-2146 2012-08-29 11:14 2012-08-26 Show GitHub Exploit DB Packet Storm
194839 6.8 警告 Munin - Munin の cgi-bin/munin-cgi-graph における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2104 2012-08-29 10:56 2012-08-26 Show GitHub Exploit DB Packet Storm
194840 9.3 危険 Sitecom - Sitecom WLM-2501 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1921 2012-08-29 10:28 2012-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 8.1 HIGH
Network 		- - The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all versions up to, and including, 1.9.11. T… CWE-862
 Missing Authorization 		CVE-2024-13767 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
242 6.4 MEDIUM
Network 		- - The Gosign – Posts Slider Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'posts-slider-block' block in all versions up to, and including, 1.1.0 due to insufficient in… CWE-79
Cross-site Scripting 		CVE-2024-13399 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
243 6.4 MEDIUM
Network 		- - The WPRadio – WordPress Radio Streaming Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpradio_player' shortcode in all versions up to, and including, 1.0.… CWE-79
Cross-site Scripting 		CVE-2024-13397 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
244 6.4 MEDIUM
Network 		- - The Frictionless plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'frictionless_form' shortcode[s] in all versions up to, and including, 0.0.23 due to insufficient i… CWE-79
Cross-site Scripting 		CVE-2024-13396 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
245 - - - An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem. - CVE-2023-0092 2025-01-31 11:15 2025-01-31 Show GitHub Exploit DB Packet Storm
246 - - - Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. - CVE-2022-1736 2025-01-31 11:15 2025-01-31 Show GitHub Exploit DB Packet Storm
247 - - - gdbus setgid privilege escalation - CVE-2020-11936 2025-01-31 11:15 2025-01-31 Show GitHub Exploit DB Packet Storm
248 - - - This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Pioneer DMH-WT7600NEX devices. Although authentication is required to exploit this vulnerab… - CVE-2024-23929 2025-01-31 10:15 2025-01-31 Show GitHub Exploit DB Packet Storm
249 - - - This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vul… - CVE-2024-23921 2025-01-31 10:15 2025-01-31 Show GitHub Exploit DB Packet Storm
250 - - - This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vul… - CVE-2024-23920 2025-01-31 10:15 2025-01-31 Show GitHub Exploit DB Packet Storm