Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191 6.1 警告
Network
Liferay Digital Experience Platform Liferay の Digital Experience Platform におけるオープンリダイレクトの脆弱性 CWE-601
CWE-601
CVE-2023-44308 2025-01-30 10:31 2023-09-28 Show GitHub Exploit DB Packet Storm
192 5.4 警告
Network
WordPress Go Go Custom Field Template WordPress Go Go の WordPress 用 Custom Field Template におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2023-6745 2025-01-30 10:31 2023-12-12 Show GitHub Exploit DB Packet Storm
193 7.8 重要
Local
- IBM の Security Verify Access における脆弱性 CWE-250
CWE-Other
CVE-2024-49804 2025-01-30 10:24 2024-11-29 Show GitHub Exploit DB Packet Storm
194 7.8 重要
Local
IBM Security Verify Access Docker IBM の Security Verify Access Docker における脆弱性 CWE-250
CWE-Other
CVE-2024-35141 2025-01-30 10:17 2024-05-30 Show GitHub Exploit DB Packet Storm
195 5.4 警告
Network
POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-5341 2025-01-30 10:10 2024-05-30 Show GitHub Exploit DB Packet Storm
196 7.5 重要
Network
Mikko Saari Relevanssi Mikko Saari の WordPress 用 Relevanssi における脆弱性 CWE-200
CWE-noinfo
CVE-2024-7630 2025-01-30 10:10 2024-08-16 Show GitHub Exploit DB Packet Storm
197 5.4 警告
Network
bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-9058 2025-01-30 10:10 2024-12-3 Show GitHub Exploit DB Packet Storm
198 6.1 警告
Network
3dflipbook 3d flipbook 3dflipbook の WordPress 用 3d flipbook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-43152 2025-01-30 10:10 2024-08-12 Show GitHub Exploit DB Packet Storm
199 9.8 緊急
Network
OpenImageIO project OpenImageIO OpenImageIO project の OpenImageIO における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2024-55192 2025-01-30 10:10 2024-12-6 Show GitHub Exploit DB Packet Storm
200 6.5 警告
Network
インターネット技術タスクフォース (IETF) IPv6 インターネット技術タスクフォース (IETF) の IPv6 における脆弱性 CWE-940
CWE-Other
CVE-2025-23018 2025-01-30 10:10 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1301 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts in… CWE-79
Cross-site Scripting
CVE-2024-53964 2025-02-12 01:05 2025-02-5 Show GitHub Exploit DB Packet Storm
1302 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute arbitrary cod… CWE-79
Cross-site Scripting
CVE-2024-53963 2025-02-12 01:05 2025-02-5 Show GitHub Exploit DB Packet Storm
1303 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts in… CWE-79
Cross-site Scripting
CVE-2024-53962 2025-02-12 01:04 2025-02-5 Show GitHub Exploit DB Packet Storm
1304 - - - AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbi… - CVE-2024-33659 2025-02-12 00:15 2025-02-12 Show GitHub Exploit DB Packet Storm
1305 - - - Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset fu… - CVE-2025-1231 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1306 - - - In affected versions of Octopus Server it was possible for a user with sufficient access to set custom headers in all server responses. By submitting a specifically crafted referrer header the user c… - CVE-2025-0588 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1307 - - - In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code which may impact the u… - CVE-2025-0513 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1308 - - - A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulat… - CVE-2025-1182 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1309 - - - A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation le… - CVE-2025-1181 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1310 - - - A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipu… - CVE-2025-1180 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm