Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201601 7.5 危険 derek leung - pSlash の modules/visitors2/include/config.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4373 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201602 7.5 危険 constructor component - Mambo の lurm_constructor の admin.lurm_constructor.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4372 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201603 4 警告 Alt-N - MDaemon が稼動している Alt-N WebAdmin におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4371 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201604 7.5 危険 Alt-N - MDaemon が稼動している Alt-N WebAdmin におけるグローバル管理者のパスワードを変更される脆弱性 - CVE-2006-4370 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201605 7.5 危険 all topics - phpBB の All Topics Hack の alltopics.php における SQL インジェクションの脆弱性 - CVE-2006-4367 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201606 5 警告 Alt-N - Alt-N Technologies MDaemon の POP3 サーバにおけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4364 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201607 7.5 危険 cropimage component - Mambo 用の CropImage コンポーネントの admin.cropcanvas.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4363 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201608 4.3 警告 dieselscripts - Diesel Paid Mail の getad.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4362 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201609 4.3 警告 dieselscripts - Diesel Job Site の jobseekers/forgot.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4361 2012-06-26 15:37 2006-08-26 Show GitHub Exploit DB Packet Storm
201610 3.5 注意 Drupal - Drupal 用の E-commerce におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4360 2012-06-26 15:37 2006-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 5.3 MEDIUM
Network 		- - IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information in HTTP responses that c… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2023-38013 2025-01-25 23:15 2025-01-25 Show GitHub Exploit DB Packet Storm
852 5.3 MEDIUM
Network 		- - IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially… CWE-22
Path Traversal 		CVE-2023-38012 2025-01-25 23:15 2025-01-25 Show GitHub Exploit DB Packet Storm
853 7.5 HIGH
Network 		- - The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads dire… CWE-200
Information Exposure 		CVE-2024-13562 2025-01-25 21:15 2025-01-25 Show GitHub Exploit DB Packet Storm
854 6.4 MEDIUM
Network 		- - The Divi Carousel Maker – Image, Logo, Testimonial, Post Carousel & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Carousel and Logo Carousel in all ver… CWE-79
Cross-site Scripting 		CVE-2025-0350 2025-01-25 19:15 2025-01-25 Show GitHub Exploit DB Packet Storm
855 3.8 LOW
Network 		- - The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all ve… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-13450 2025-01-25 18:15 2025-01-25 Show GitHub Exploit DB Packet Storm
856 5.3 MEDIUM
Network 		- - The Boom Fest plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'bf_admin_action' function in all versions up to, and including, 2.2.1. … CWE-862
 Missing Authorization 		CVE-2024-13449 2025-01-25 18:15 2025-01-25 Show GitHub Exploit DB Packet Storm
857 6.4 MEDIUM
Network 		- - The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.2.7.5 due to insufficient input sanitization and output… CWE-79
Cross-site Scripting 		CVE-2024-13599 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
858 6.4 MEDIUM
Network 		- - The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input s… CWE-79
Cross-site Scripting 		CVE-2024-13586 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
859 6.4 MEDIUM
Network 		- - The ABC Notation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abcjs' shortcode in all versions up to, and including, 6.1.3 due to insufficient input sanitizatio… CWE-79
Cross-site Scripting 		CVE-2024-13551 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm
860 6.5 MEDIUM
Network 		- - The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the 'file' attribute of the 'abcjs' shortcode. This makes it possible for authent… CWE-22
Path Traversal 		CVE-2024-13550 2025-01-25 17:15 2025-01-25 Show GitHub Exploit DB Packet Storm