Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202721 7.5 危険 Joachim Ruhs - TYPO3 用 Event エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4950 2012-02-29 11:42 2011-10-9 Show GitHub Exploit DB Packet Storm
202722 4.3 警告 Codologic.com - Joomla! 用 FreiChat および FreiChatPure におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4949 2012-02-29 11:21 2011-10-9 Show GitHub Exploit DB Packet Storm
202723 7.5 危険 Phpgalleryscript - PHP Free Photo Gallery script における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-4948 2012-02-29 11:19 2011-10-9 Show GitHub Exploit DB Packet Storm
202724 4.3 警告 Allpcscript - ALLPC の advanced_search_result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4947 2012-02-29 11:17 2011-10-9 Show GitHub Exploit DB Packet Storm
202725 7.5 危険 Allpcscript - ALLPC の product_info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4946 2012-02-29 11:16 2011-10-9 Show GitHub Exploit DB Packet Storm
202726 7.5 危険 Joomla! - Joomla! 用 CamelcityDB コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4945 2012-02-29 11:15 2011-10-9 Show GitHub Exploit DB Packet Storm
202727 7.5 危険 Joomla! - Mambo および Joomla! 用 Elite Experts コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4944 2012-02-29 11:14 2011-10-9 Show GitHub Exploit DB Packet Storm
202728 7.5 危険 Saurused - Saurus CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-4943 2012-02-29 11:08 2011-10-9 Show GitHub Exploit DB Packet Storm
202729 7.5 危険 E-Xoopport - E-Xoopport Samsara の location.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4942 2012-02-29 11:06 2011-10-9 Show GitHub Exploit DB Packet Storm
202730 7.5 危険 Joomla Mo - Joomla! 用 Teams (com_teams) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4941 2012-02-29 11:02 2011-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1101 - - - Cross-Site Request Forgery (CSRF) vulnerability in FS-code FS Poster allows Cross Site Request Forgery.This issue affects FS Poster: from n/a through 6.5.8. CWE-352
 Origin Validation Error
CVE-2024-37237 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1102 - - - A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file… CWE-287
Improper Authentication
CVE-2024-13111 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1103 - - - A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/… CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2024-13110 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1104 - - - In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and page… - CVE-2024-56710 2025-01-2 23:15 2024-12-29 Show GitHub Exploit DB Packet Storm
1105 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Hait Post Grid Elementor Addon allows Stored XSS.This issue affects Post Grid Elementor Addon:… CWE-79
Cross-site Scripting
CVE-2024-56268 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1106 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolPlugins Coins MarketCap allows DOM-Based XSS.This issue affects Coins MarketCap: from n/a thr… CWE-79
Cross-site Scripting
CVE-2024-56257 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1107 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markyis Cool Olivia allows Reflected XSS.This issue affects Olivia: from n/a through 0.9.5. CWE-79
Cross-site Scripting
CVE-2024-56014 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1108 - - - Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro allows Authentication Bypass.This issue affects ListingPro: from n/a through 2.9.4. CWE-352
 Origin Validation Error
CVE-2024-39623 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1109 - - - Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search.This issue affects WP Fast Total Search: from n/a through 1.69.234. CWE-352
 Origin Validation Error
CVE-2024-38778 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
1110 - - - Cross-Site Request Forgery (CSRF) vulnerability in Marsian allows Cross Site Request Forgery.This issue affects i-transform: from n/a through 3.0.9. CWE-352
 Origin Validation Error
CVE-2024-38764 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm