Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202611 5 警告 アップル - Apple Safari の WebKit における認証情報をキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2012-0647 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
202612 5 警告 アップル - Apple Safari の WebKit におけるユーザを追跡される脆弱性 CWE-200
情報漏えい 		CVE-2012-0640 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
202613 6.4 警告 アップル - Windows 上で稼働する Apple Safari の IDN 機能におけるドメイン名を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0584 2012-03-14 15:34 2012-03-12 Show GitHub Exploit DB Packet Storm
202614 6.4 警告 VMware - VMware vCenter Chargeback Manager における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1472 2012-03-14 15:15 2012-03-8 Show GitHub Exploit DB Packet Storm
202615 5 警告 yaSSL - yaSSL CyaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1558 2012-03-14 11:53 2012-03-12 Show GitHub Exploit DB Packet Storm
202616 7.5 危険 Parallels - Parallels Plesk Panel の admin/plib/api-rpc/Agent.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1557 2012-03-14 11:52 2012-03-12 Show GitHub Exploit DB Packet Storm
202617 4.3 警告 Ruby on Rails project - Ruby on Rails の select helper におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1099 2012-03-14 11:51 2012-03-13 Show GitHub Exploit DB Packet Storm
202618 4.3 警告 Ruby on Rails project - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1098 2012-03-14 11:50 2012-03-13 Show GitHub Exploit DB Packet Storm
202619 7.2 危険 BlackBerry - Research In Motion BlackBerry PlayBook タブレットのソフトウェアにおける権限を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-0291 2012-03-13 16:48 2011-12-6 Show GitHub Exploit DB Packet Storm
202620 7.5 危険 Google - Google Chrome の GPU プロセスにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-3047 2012-03-13 16:09 2012-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1021 - - - Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code… CWE-416
 Use After Free 		CVE-2024-46981 2025-01-7 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1022 - - - Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password. - CVE-2024-55076 2025-01-7 06:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1023 - - - Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes. - CVE-2024-55075 2025-01-7 06:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1024 - - - The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370. - CVE-2024-55074 2025-01-7 06:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1025 - - - A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /_parse/_call_main_search_ajax.php of th… - CVE-2024-13093 2025-01-7 06:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1026 - - - A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /_parse/_call_job/search_ajax.php of the component Job Post … - CVE-2024-13092 2025-01-7 06:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1027 - - - The AHAthat Plugin WordPress plugin through 1.6 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in … - CVE-2024-12595 2025-01-7 06:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1028 - - - The goodlayers-core WordPress plugin before 2.0.10 does not sanitise and escape some of its settings, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin… - CVE-2024-11357 2025-01-7 06:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1029 - - - The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts - CVE-2024-11184 2025-01-7 06:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1030 - - - Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the UploadFile element in a SOAP request to /XSDService.asmx. - CVE-2024-56829 2025-01-7 06:15 2025-01-2 Show GitHub Exploit DB Packet Storm