Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195111 4.3 警告 Imagely
WordPress.org		 - Wordpress の NextGEN Gallery プラグインの xml/media-rss.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1186 2012-06-26 16:19 2010-04-7 Show GitHub Exploit DB Packet Storm
195112 4.3 警告 アップル - Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1181 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
195113 9.3 危険 アップル - Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1180 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
195114 9.3 危険 アップル - iPod touch 用 Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-1179 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
195115 4.3 警告 アップル - Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1178 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
195116 9.3 危険 アップル - Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1177 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
195117 9.3 危険 アップル - Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1176 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
195118 5 警告 シスコシステムズ - Cisco TFTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1174 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
195119 4.3 警告 Fetchmail Project - fetchmail におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1167 2012-06-26 16:19 2010-05-6 Show GitHub Exploit DB Packet Storm
195120 9 危険 Atlassian - Atlassian JIRA における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1165 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pflonk Sidebar-Content from Shortcode allows DOM-Based XSS.This issue affects Sidebar-Content fro… CWE-79
Cross-site Scripting 		CVE-2025-23642 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
582 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Ehrhardt Powie's pLinks PagePeeker allows DOM-Based XSS.This issue affects Powie's pLinks … CWE-79
Cross-site Scripting 		CVE-2025-23641 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
583 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through 1.2.0. CWE-352
 Origin Validation Error 		CVE-2025-23640 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
584 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader allows Stored XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0. CWE-352
 Origin Validation Error 		CVE-2025-23639 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
585 - - - Cross-Site Request Forgery (CSRF) vulnerability in Gordon French Comment-Emailer allows Stored XSS.This issue affects Comment-Emailer: from n/a through 1.0.5. CWE-352
 Origin Validation Error 		CVE-2025-23627 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
586 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on allows Reflected XSS.This issue affects Contact For… CWE-79
Cross-site Scripting 		CVE-2025-23623 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
587 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Trofimov Captchelfie – Captcha by Selfie allows Reflected XSS.This issue affects Captchelf… CWE-79
Cross-site Scripting 		CVE-2025-23620 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
588 - - - Cross-Site Request Forgery (CSRF) vulnerability in Andrea Brandi Twitter Shortcode allows Stored XSS.This issue affects Twitter Shortcode: from n/a through 0.9. CWE-352
 Origin Validation Error 		CVE-2025-23618 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
589 - - - Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal Floatbox Plus allows Stored XSS.This issue affects Floatbox Plus: from n/a through 1.4.4. CWE-352
 Origin Validation Error 		CVE-2025-23617 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
590 - - - Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Word Freshener allows Stored XSS.This issue affects Word Freshener: from n/a through 1.3. CWE-352
 Origin Validation Error 		CVE-2025-23577 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm