Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 10:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201041 4.3 警告 WordPress.org - WordPress の wp-comments-post.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2404 2012-04-24 15:51 2012-04-21 Show GitHub Exploit DB Packet Storm
201042 4.3 警告 WordPress.org - WordPress の wp-includes/formatting.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2403 2012-04-24 15:49 2012-04-21 Show GitHub Exploit DB Packet Storm
201043 5.5 警告 WordPress.org - WordPress の wp-admin/plugins.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2402 2012-04-24 15:43 2012-04-21 Show GitHub Exploit DB Packet Storm
201044 5 警告 WordPress.org
Moxiecode Systems
- WordPress および他の製品で使用される Plupload における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2401 2012-04-24 15:35 2012-04-21 Show GitHub Exploit DB Packet Storm
201045 10 危険 WordPress.org - WordPress の wp-includes/js/swfobject.js における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-2400 2012-04-24 15:27 2012-04-21 Show GitHub Exploit DB Packet Storm
201046 6.8 警告 ジャストシステム - 複数のジャストシステム製品における DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2012-1242 2012-04-24 12:00 2012-04-24 Show GitHub Exploit DB Packet Storm
201047 5 警告 CA Technologies - Windows 上で稼働する CA ARCserve Backup におけるサービス運用妨害 (サービスシャットダウン) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1662 2012-04-23 15:35 2012-03-20 Show GitHub Exploit DB Packet Storm
201048 6.5 警告 Ryan Walberg - PHP Gift Registry の users.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2236 2012-04-23 14:41 2012-04-20 Show GitHub Exploit DB Packet Storm
201049 4.9 警告 Comodo - Windows 7 64-bit プラットフォーム上で稼働する Comodo Internet Security におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション
CVE-2012-2273 2012-04-23 14:40 2012-04-20 Show GitHub Exploit DB Packet Storm
201050 5 警告 DELL EMC (旧 EMC Corporation) - EMC Data Protection Advisor の DPA_Utilities ライブラリにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-0407 2012-04-23 14:37 2012-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 - - - Server-Side Request Forgery (SSRF) vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 throu… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2025-22346 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
542 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AGILELOGIX Free Google Maps allows Stored XSS.This issue affects Free Google Maps: from n/a throu… New CWE-79
Cross-site Scripting
CVE-2025-22329 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
543 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in galleryape Photo Gallery – Image Gallery by Ape allows Reflected XSS.This issue affects Photo Gal… New CWE-79
Cross-site Scripting
CVE-2025-22317 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
544 - - - Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which … New - CVE-2025-21088 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
545 - - - A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by u… New CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-8603 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
546 - - - Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 5.5.6. New CWE-862
 Missing Authorization
CVE-2024-56295 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
547 - - - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impa… New - CVE-2025-23073 2025-01-16 01:15 2025-01-15 Show GitHub Exploit DB Packet Storm
548 - - - Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover (0x1) and Identity (0x4), the success flag of the call is not checked. As a consequence… New - CVE-2025-21607 2025-01-16 01:15 2025-01-15 Show GitHub Exploit DB Packet Storm
549 - - - An issue in the qi_inst_state_free component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Update - CVE-2024-57650 2025-01-16 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
550 - - - An issue in the qst_vec_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Update - CVE-2024-57649 2025-01-16 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm