Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194991 9.3 危険 Blizzard Entertainment, Inc. - Warcraft III: The Frozen Throne の JASS スクリプトインタプリタにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4768 2012-06-26 16:19 2010-04-20 Show GitHub Exploit DB Packet Storm
194992 5 警告 cnr.somee - CNR Hikaye Portal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4765 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
194993 9.3 危険 マイクロソフト
アドビシステムズ		 - Adobe Reader におけるユーザに任意のコードを実行させる脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4764 2012-06-26 16:19 2010-04-5 Show GitHub Exploit DB Packet Storm
194994 9.3 危険 dicas - dicas Mpegable Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4758 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
194995 9.3 危険 evils-world - BrotherSoft EW-MusicPlayer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4757 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
194996 9.3 危険 beatport - Beatport Player の TraktorBeatport.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4756 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
194997 7.5 危険 andrew charlton
WordPress.org		 - WordPress の My Category Order プラグインの mycategoryorder.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4748 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
194998 4.3 警告 dreamlevels - Dreamlevels DreamPoll の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4746 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
194999 7.5 危険 dreamlevels - Dreamlevels DreamPoll の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4745 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
195000 4.3 警告 AfterLogic - AfterLogic WebMail Pro の history-storage.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4743 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 - - - Cross-Site Request Forgery (CSRF) vulnerability in wellwisher Custom Widget Classes allows Cross Site Request Forgery.This issue affects Custom Widget Classes: from n/a through 1.1. New CWE-352
 Origin Validation Error 		CVE-2025-23844 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
292 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nilesh Shiragave WordPress Gallery Plugin allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin: from n/a through 1.4. New CWE-352
 Origin Validation Error 		CVE-2025-23842 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
293 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikos M. Top Flash Embed allows Stored XSS.This issue affects Top Flash Embed: from n/a through 0… New CWE-79
Cross-site Scripting 		CVE-2025-23841 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
294 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RaminMT Links/Problem Reporter allows DOM-Based XSS.This issue affects Links/Problem Reporter: fr… New CWE-79
Cross-site Scripting 		CVE-2025-23833 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
295 - - - Cross-Site Request Forgery (CSRF) vulnerability in Matt Gibbs Admin Cleanup allows Stored XSS.This issue affects Admin Cleanup: from n/a through 1.0.2. New CWE-352
 Origin Validation Error 		CVE-2025-23832 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
296 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rene Hermenau QR Code Generator allows DOM-Based XSS.This issue affects QR Code Generator: from n… New CWE-79
Cross-site Scripting 		CVE-2025-23831 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
297 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jobair JB Horizontal Scroller News Ticker allows DOM-Based XSS.This issue affects JB Horizontal S… New CWE-79
Cross-site Scripting 		CVE-2025-23830 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
298 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OriginalTips.com WordPress Data Guard allows Stored XSS.This issue affects WordPress Data Guard: … New CWE-79
Cross-site Scripting 		CVE-2025-23828 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
299 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Strx Strx Magic Floating Sidebar Maker allows Stored XSS.This issue affects Strx Magic Floating S… New CWE-79
Cross-site Scripting 		CVE-2025-23827 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
300 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Predrag Supurovic Stop Comment Spam allows Stored XSS.This issue affects Stop Comment Spam: from … New CWE-79
Cross-site Scripting 		CVE-2025-23826 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm