Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202601 5 警告 TIBCO Software - 複数の TIBCO 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0687 2012-03-15 11:14 2012-03-8 Show GitHub Exploit DB Packet Storm
202602 5 警告 IBM - 複数の IBM 製品におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1394 2012-03-14 16:24 2012-02-14 Show GitHub Exploit DB Packet Storm
202603 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1395 2012-03-14 16:23 2012-02-14 Show GitHub Exploit DB Packet Storm
202604 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1396 2012-03-14 16:23 2012-02-14 Show GitHub Exploit DB Packet Storm
202605 6.8 警告 IBM - 複数の IBM 製品の Labor Reporting ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1397 2012-03-14 16:22 2012-02-14 Show GitHub Exploit DB Packet Storm
202606 6.5 警告 IBM - 複数の IBM 製品 の KPI コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4816 2012-03-14 16:08 2012-02-14 Show GitHub Exploit DB Packet Storm
202607 4 警告 IBM - 複数の IBM 製品 の Help メニューの About オプションにおける詳細不明な脆弱性 CWE-200
情報漏えい
CVE-2011-4817 2012-03-14 16:07 2012-02-14 Show GitHub Exploit DB Packet Storm
202608 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2011-4818 2012-03-14 16:06 2012-02-14 Show GitHub Exploit DB Packet Storm
202609 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4819 2012-03-14 16:05 2012-02-14 Show GitHub Exploit DB Packet Storm
202610 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0195 2012-03-14 16:04 2012-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1271 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markyis Cool Olivia allows Reflected XSS.This issue affects Olivia: from n/a through 0.9.5. CWE-79
Cross-site Scripting
CVE-2024-56014 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1272 - - - Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro allows Authentication Bypass.This issue affects ListingPro: from n/a through 2.9.4. CWE-352
 Origin Validation Error
CVE-2024-39623 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1273 - - - Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search.This issue affects WP Fast Total Search: from n/a through 1.69.234. CWE-352
 Origin Validation Error
CVE-2024-38778 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1274 - - - Cross-Site Request Forgery (CSRF) vulnerability in Marsian allows Cross Site Request Forgery.This issue affects i-transform: from n/a through 3.0.9. CWE-352
 Origin Validation Error
CVE-2024-38764 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1275 - - - A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. It has been rated as critical. This issue affects some unknown processing of the file /doc.ht… CWE-285
CWE-266
Improper Authorization
 Incorrect Privilege Assignment
CVE-2024-13109 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1276 - - - A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulati… CWE-284
CWE-266
Improper Access Control
 Incorrect Privilege Assignment
CVE-2024-13108 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1277 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ConvertCalculator ConvertCalculator for WordPress allows Stored XSS.This issue affects ConvertCal… CWE-79
Cross-site Scripting
CVE-2024-56302 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1278 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fla-shop.com Interactive UK Map allows Stored XSS.This issue affects Interactive UK Map: from n/a… CWE-79
Cross-site Scripting
CVE-2024-56267 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1279 - - - Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio … CWE-862
 Missing Authorization
CVE-2024-56266 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1280 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through 1.14.0. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-56264 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm