Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 29, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196991 6.8 警告 electrictoad - SnippetMaster における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0530 2012-06-26 16:10 2009-02-11 Show GitHub Exploit DB Packet Storm
196992 4.3 警告 electrictoad - SnippetMaster Webpage Editor の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0529 2012-06-26 16:10 2009-02-11 Show GitHub Exploit DB Packet Storm
196993 6.8 警告 AdaptCMS - AdaptCMS Lite の plugins/rss_importer_functions.php における任意の PHP コードが実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0527 2012-06-26 16:10 2009-02-11 Show GitHub Exploit DB Packet Storm
196994 4.3 警告 AdaptCMS - AdaptCMS Lite の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0526 2012-06-26 16:10 2009-02-11 Show GitHub Exploit DB Packet Storm
196995 7.5 危険 businessspace - BusinessSpace の classified.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0516 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
196996 9.3 危険 elecard - Elecard MPEG Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0491 2012-06-26 16:10 2009-02-9 Show GitHub Exploit DB Packet Storm
196997 9.3 危険 Audacity - Audacity の lib-src/allegro/strparse.cpp の String_parse::get_nonspace_quoted 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0490 2012-06-26 16:10 2009-02-9 Show GitHub Exploit DB Packet Storm
196998 6.8 警告 armorlogic - Profense Web Application Firewall の ajax.html におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0468 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
196999 4.3 警告 armorlogic - Profense Web Application Firewall の proxy.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0467 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197000 5.1 警告 Groone's World - Groone GBook の includes/header.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0464 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 29, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
921 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress File Search allows Reflected XSS. This issue affects WordPress File Search: fr… CWE-79
Cross-site Scripting 		CVE-2025-23867 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
922 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EU DSGVO Helper allows Reflected XSS. This issue affects EU DSGVO Helper: from n/a throu… CWE-79
Cross-site Scripting 		CVE-2025-23866 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
923 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kolja Nolte Flexible Blogtitle allows Reflected XSS. This issue affects Flexible Blogtitle: from … CWE-79
Cross-site Scripting 		CVE-2025-23846 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
924 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows Reflected XSS. This issue affects Co… CWE-79
Cross-site Scripting 		CVE-2025-23812 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
925 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP2APP allows Reflected XSS. This issue affects WP2APP: from n/a through 2.6.2. CWE-79
Cross-site Scripting 		CVE-2025-23811 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
926 - - - Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe allows Reflected XSS. This issue affects Ultimate Subscribe: from n/a through 1.3. CWE-352
 Origin Validation Error 		CVE-2025-23806 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
927 - - - Cross-Site Request Forgery (CSRF) vulnerability in PQINA Snippy allows Reflected XSS. This issue affects Snippy: from n/a through 1.4.1. CWE-352
 Origin Validation Error 		CVE-2025-23803 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
928 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliott Robson Mass Messaging in BuddyPress allows Reflected XSS. This issue affects Mass Messagin… CWE-79
Cross-site Scripting 		CVE-2025-23798 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
929 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows SQL Injection. This issue affects Co… CWE-89
SQL Injection 		CVE-2025-23784 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
930 - - - Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WM Options Import Export allows Retrieve Embedded Sensitive Data. This issue affects WM Options Import Export: from n/a thr… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-23781 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm