Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200421 4.3 警告 dynaliens - dynaliens におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1390 2012-06-26 15:46 2007-03-10 Show GitHub Exploit DB Packet Storm
200422 7.5 危険 dynaliens - dynaliens における認証を回避される脆弱性 - CVE-2007-1389 2012-06-26 15:46 2007-03-10 Show GitHub Exploit DB Packet Storm
200423 5 警告 アドビシステムズ
Mozilla Foundation
ネットスケープ
Opera Software ASA		 - Adobe Reader の AcroPDF.DLL におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1377 2012-06-26 15:46 2007-03-9 Show GitHub Exploit DB Packet Storm
200424 3.5 注意 Drupal - Drupal 用の Project issue tracking モジュールにおけるプライベートノードのコンテンツを読み取られる脆弱性 - CVE-2007-1368 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
200425 4.3 警告 アバイア - Avaya CM のログインページにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1367 2012-06-26 15:46 2007-03-7 Show GitHub Exploit DB Packet Storm
200426 4.9 警告 Fabrice Bellard - QEMU における仮想マシンがクラッシュされる脆弱性 - CVE-2007-1366 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
200427 6.4 警告 dropafew - DropAFew における任意のユーザを作成される脆弱性 - CVE-2007-1364 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
200428 7.5 危険 dropafew - DropAFew における SQL インジェクションの脆弱性 - CVE-2007-1363 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
200429 6 警告 Drupal - Drupal 用の Nodefamily モジュールにおける他のユーザのプロファイルを変更する脆弱性 - CVE-2007-1360 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
200430 4.1 警告 CA Technologies - CA eTrust Admin 用の GINA コンポーネントの cube.exe における認証を回避される脆弱性 - CVE-2007-1345 2012-06-26 15:46 2007-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1781 6.4 MEDIUM
Network 		- - The Ticketmeo – Sell Tickets – Event Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.3.6 due to insuffi… CWE-79
Cross-site Scripting 		CVE-2025-0507 2025-01-31 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1782 9.8 CRITICAL
Network 		- - The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions up to, and including, 4.2.14 via the t… CWE-22
Path Traversal 		CVE-2025-0493 2025-01-31 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1783 5.4 MEDIUM
Network 		- - The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and i… CWE-79
Cross-site Scripting 		CVE-2024-10867 2025-01-31 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1784 6.1 MEDIUM
Network 		- - The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the title parameter in all versions up to, and includi… CWE-79
Cross-site Scripting 		CVE-2025-0470 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1785 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory. - CVE-2024-47900 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1786 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. - CVE-2024-47899 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1787 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. - CVE-2024-47898 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1788 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. - CVE-2024-47891 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1789 6.4 MEDIUM
Network 		- - The SeatReg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'seatreg' shortcode in all versions up to, and including, 1.56.0 due to insufficient input sanitization … CWE-79
Cross-site Scripting 		CVE-2024-13463 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1790 - - - Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers. - CVE-2024-46974 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm