Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194931 4.3 警告 Moodle - Moodle の filter/mediaplugin/filter.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4286 2012-07-18 18:06 2011-03-1 Show GitHub Exploit DB Packet Storm
194932 5.5 警告 Moodle - Moodle のデフォルト設定における任意のコースを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4285 2012-07-18 18:04 2011-03-1 Show GitHub Exploit DB Packet Storm
194933 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4284 2012-07-18 17:55 2011-03-1 Show GitHub Exploit DB Packet Storm
194934 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4283 2012-07-18 17:53 2011-03-1 Show GitHub Exploit DB Packet Storm
194935 4.3 警告 Moodle - Moodle の tag/coursetags_more.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4282 2012-07-18 17:48 2011-03-1 Show GitHub Exploit DB Packet Storm
194936 6.8 警告 Moodle - Moodle におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-4281 2012-07-18 17:47 2011-03-1 Show GitHub Exploit DB Packet Storm
194937 4.3 警告 Nimish Pachapurkar
Moodle
- Moodle およびその他の製品で使用される Spike PHPCoverage library におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4280 2012-07-18 17:45 2011-03-1 Show GitHub Exploit DB Packet Storm
194938 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4279 2012-07-18 17:43 2011-03-1 Show GitHub Exploit DB Packet Storm
194939 4.3 警告 Moodle - Moodle のタグのオートコンプリート機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4278 2012-07-18 17:42 2011-03-1 Show GitHub Exploit DB Packet Storm
194940 6.8 警告 Moodle - Moodle におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-4133 2012-07-18 17:27 2011-03-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
601 - - - Cross-Site Request Forgery (CSRF) vulnerability in anyroad.com AnyRoad allows Cross Site Request Forgery. This issue affects AnyRoad: from n/a through 1.3.2. New CWE-352
 Origin Validation Error
CVE-2025-23996 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
602 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatebud Estatebud – Properties & Listings allows Stored XSS. This issue affects Estatebud – Pro… New CWE-79
Cross-site Scripting
CVE-2025-23994 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
603 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matthew Garvin BizLibrary allows Reflected XSS. This issue affects BizLibrary: from n/a through 1… New CWE-79
Cross-site Scripting
CVE-2025-23580 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
604 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in P. Razvan SexBundle allows Reflected XSS. This issue affects SexBundle: from n/a through 1.4. New CWE-79
Cross-site Scripting
CVE-2025-23551 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
605 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Messenlehner of WebDevStudios WP-Announcements allows Reflected XSS. This issue affects WP-… New CWE-79
Cross-site Scripting
CVE-2025-23489 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
606 - - - Missing Authorization vulnerability in Realty Workstation Realty Workstation allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Realty Workstation: from n/a through 1… New CWE-862
 Missing Authorization
CVE-2025-23477 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
607 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrea Dotta, Jacopo Campani, di xkoll.com Social2Blog allows Reflected XSS. This issue affects S… New CWE-79
Cross-site Scripting
CVE-2025-23461 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
608 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flashmaniac Nature FlipBook allows Reflected XSS. This issue affects Nature FlipBook: from n/a th… New CWE-79
Cross-site Scripting
CVE-2025-23454 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
609 - - - Missing Authorization vulnerability in Widget Options Team Widget Options allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Widget Options: from n/a through … New CWE-862
 Missing Authorization
CVE-2025-22722 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
610 - - - Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Apply… New CWE-862
 Missing Authorization
CVE-2025-22721 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm