Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196111 3.7 注意 GNU Project - GNU nano におけるファイルの所有者を変更される脆弱性 CWE-362
競合状態
CVE-2010-1161 2012-06-26 16:19 2010-04-15 Show GitHub Exploit DB Packet Storm
196112 1.9 注意 GNU Project - GNU nano における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-1160 2012-06-26 16:19 2010-04-7 Show GitHub Exploit DB Packet Storm
196113 6.8 警告 Apache Software Foundation - Apache HTTP Server の mod_auth_shadow モジュールにおけるデータを変更される脆弱性 CWE-362
競合状態
CVE-2010-1151 2012-06-26 16:19 2010-04-20 Show GitHub Exploit DB Packet Storm
196114 2.1 注意 freedesktop.org - udisks の probers/udisks-dm-export.c における暗号鍵を発見される脆弱性 CWE-200
情報漏えい
CVE-2010-1149 2012-06-26 16:19 2010-04-6 Show GitHub Exploit DB Packet Storm
196115 9.3 危険 georg greve - SpamAssassin Milter プラグインにおける任意のシステムコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-1132 2012-06-26 16:19 2010-03-27 Show GitHub Exploit DB Packet Storm
196116 4.3 警告 アップル
マイクロソフト
- Apple Safari で使用される JavaScriptCore.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-1131 2012-06-26 16:19 2010-03-27 Show GitHub Exploit DB Packet Storm
196117 5.8 警告 アップル - WebKit の JavaScript 実装におけるキーストロークを form フィールドに送信される脆弱性 CWE-200
情報漏えい
CVE-2010-1126 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
196118 2.1 注意 chip salzenberg - Chip Salzenberg Deliver におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2010-1123 2012-06-26 16:19 2010-03-26 Show GitHub Exploit DB Packet Storm
196119 5 警告 ASP indir - LookMer Music Portal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1116 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
196120 5 警告 comscripts - Web Server Creator - Web Portal の news/include/customize.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1115 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 6.5 MEDIUM
Network
- - The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the 'file' attribute of the 'abcjs' shortcode. This makes it possible for authent… CWE-22
Path Traversal
CVE-2024-13550 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1232 6.4 MEDIUM
Network
- - The Power Ups for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'magic-button' shortcode in all versions up to, and including, 1.2.2 due to insufficient… CWE-79
Cross-site Scripting
CVE-2024-13548 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1233 6.1 MEDIUM
Network
- - The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient i… CWE-79
Cross-site Scripting
CVE-2024-13467 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1234 6.4 MEDIUM
Network
- - The WordPress SEO Friendly Accordion FAQ with AI assisted content generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'noticefaq' shortcode in all versions u… CWE-79
Cross-site Scripting
CVE-2024-13458 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1235 6.4 MEDIUM
Network
- - The Bilingual Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bl_otherlang_link_1 parameter in all versions up to, and including, 2.4 due to insufficient input saniti… CWE-79
Cross-site Scripting
CVE-2024-13441 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1236 6.5 MEDIUM
Network
- - The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the s… CWE-862
 Missing Authorization
CVE-2024-13370 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1237 4.3 MEDIUM
Network
- - The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the y… CWE-862
 Missing Authorization
CVE-2024-13368 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1238 6.5 MEDIUM
Network
- - The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versi… CWE-22
Path Traversal
CVE-2024-12885 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1239 4.3 MEDIUM
Network
- - The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() funct… CWE-862
 Missing Authorization
CVE-2024-12826 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1240 6.4 MEDIUM
Network
- - The Etsy Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_link' shortcode in all versions up to, and including, 1.4.2 due to insufficient input san… CWE-79
Cross-site Scripting
CVE-2024-12817 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm