Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195271 1.2 注意 X.Org Foundation - X.Org xserver の os/utils.c における情報漏えいの脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-4028 2012-08-3 14:48 2011-10-18 Show GitHub Exploit DB Packet Storm
195272 4.3 警告 ヤフー株式会社 - Yahoo!ツールバー (Chrome 版 / Safari 版) においてツールバーが書き換え可能な脆弱性 CWE-Other
その他 		CVE-2012-2647 2012-08-2 16:44 2012-07-30 Show GitHub Exploit DB Packet Storm
195273 5 警告 GoodiWare - GoodReader におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2648 2012-08-2 12:01 2012-08-2 Show GitHub Exploit DB Packet Storm
195274 6.5 警告 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2962 2012-08-1 17:29 2012-07-11 Show GitHub Exploit DB Packet Storm
195275 7.5 危険 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) における任意の SQL コマンドを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3951 2012-08-1 16:53 2012-07-11 Show GitHub Exploit DB Packet Storm
195276 4.3 警告 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3848 2012-08-1 16:52 2012-07-11 Show GitHub Exploit DB Packet Storm
195277 9.4 危険 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) における任意のファイルを作成または上書きされる脆弱性 CWE-Other
その他 		CVE-2012-2627 2012-08-1 16:47 2012-07-11 Show GitHub Exploit DB Packet Storm
195278 5 警告 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) における管理者アカウントを追加される脆弱性 CWE-287
不適切な認証 		CVE-2012-2626 2012-08-1 16:45 2012-07-11 Show GitHub Exploit DB Packet Storm
195279 4.4 警告 ICONICS, Inc. - ICONICS GENESIS32 および BizViz におけるアクセス制限を回避される脆弱性 CWE-310
暗号の問題 		CVE-2012-3018 2012-08-1 16:39 2012-07-30 Show GitHub Exploit DB Packet Storm
195280 7.8 危険 シーメンス - Siemens SIMATIC S7-400 PN CPU におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-3017 2012-08-1 16:27 2012-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 - - - An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to achieve SQL injection … - CVE-2024-53923 2025-01-25 04:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1292 - - - A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP mess… - CVE-2024-24442 2025-01-25 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1293 5.4 MEDIUM
Network 		gambit stackable The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the Button block in all versions up to, and including, 3.1… CWE-79
Cross-site Scripting 		CVE-2024-12117 2025-01-25 04:05 2025-01-22 Show GitHub Exploit DB Packet Storm
1294 5.4 MEDIUM
Network 		aipower aipower The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector(). This makes it p… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-13360 2025-01-25 03:58 2025-01-22 Show GitHub Exploit DB Packet Storm
1295 8.8 HIGH
Network 		aipower aipower The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including… CWE-862
 Missing Authorization 		CVE-2024-13361 2025-01-25 03:55 2025-01-22 Show GitHub Exploit DB Packet Storm
1296 7.5 HIGH
Network 		open5gs open5gs A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. CWE-617
 Reachable Assertion 		CVE-2024-24427 2025-01-25 03:47 2025-01-22 Show GitHub Exploit DB Packet Storm
1297 7.5 HIGH
Network 		open5gs open5gs A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. CWE-617
 Reachable Assertion 		CVE-2024-24428 2025-01-25 03:44 2025-01-22 Show GitHub Exploit DB Packet Storm
1298 9.8 CRITICAL
Network 		wpbot wpot The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and in… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-13091 2025-01-25 03:42 2025-01-22 Show GitHub Exploit DB Packet Storm
1299 5.3 MEDIUM
Network 		wp-polls_project wp-polls The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to insufficient escaping on the user supplied parameter and lack of suffic… CWE-89
SQL Injection 		CVE-2024-13426 2025-01-25 03:37 2025-01-22 Show GitHub Exploit DB Packet Storm
1300 5.4 MEDIUM
Network 		videowhisper picture_gallery The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_pictures' shortcode in all versions up t… CWE-79
Cross-site Scripting 		CVE-2024-13584 2025-01-25 03:20 2025-01-22 Show GitHub Exploit DB Packet Storm