Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 31, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202971 4.3 警告 Zen Cart - Zen Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4567 2011-11-30 16:34 2011-11-29 Show GitHub Exploit DB Packet Storm
202972 4.3 警告 Zen Cart - Zen Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4547 2011-11-30 16:34 2011-11-29 Show GitHub Exploit DB Packet Storm
202973 4.3 警告 Hastymail - Hastymail2 の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4541 2011-11-30 16:32 2011-11-29 Show GitHub Exploit DB Packet Storm
202974 4.3 警告 XOOPS - XOOPS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4565 2011-11-30 16:32 2011-10-3 Show GitHub Exploit DB Packet Storm
202975 4.3 警告 Activedev - Active CMS の admin script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4564 2011-11-30 16:31 2011-11-28 Show GitHub Exploit DB Packet Storm
202976 4.3 警告 JAKCMS - JAKCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4563 2011-11-30 16:27 2011-09-22 Show GitHub Exploit DB Packet Storm
202977 4.3 警告 Phorum - Phorum の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4561 2011-11-30 16:24 2011-11-28 Show GitHub Exploit DB Packet Storm
202978 3.5 注意 Drupal - Drupal の Petition Node モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4560 2011-11-30 16:23 2011-10-5 Show GitHub Exploit DB Packet Storm
202979 7.5 危険 Vtiger - vTiger CRM の Calendar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4559 2011-11-30 16:22 2011-11-28 Show GitHub Exploit DB Packet Storm
202980 4.3 警告 Contao - Contao におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4335 2011-11-29 16:28 2011-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 1, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
561 - - - A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Co… - CVE-2024-12897 2024-12-27 18:15 2024-12-23 Show GitHub Exploit DB Packet Storm
562 - - - A vulnerability has been found in Fujifilm Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hash… - CVE-2024-12782 2024-12-27 17:15 2024-12-19 Show GitHub Exploit DB Packet Storm
563 - - - A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipul… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-12981 2024-12-27 15:15 2024-12-27 Show GitHub Exploit DB Packet Storm
564 - - - The GiveWP WordPress plugin before 3.19.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high… - CVE-2024-11921 2024-12-27 15:15 2024-12-27 Show GitHub Exploit DB Packet Storm
565 - - - The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them v… - CVE-2024-11842 2024-12-27 15:15 2024-12-27 Show GitHub Exploit DB Packet Storm
566 - - - The float block WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks eve… - CVE-2024-11645 2024-12-27 15:15 2024-12-27 Show GitHub Exploit DB Packet Storm
567 - - - The WP-SVG WordPress plugin through 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users … - CVE-2024-11644 2024-12-27 15:15 2024-12-27 Show GitHub Exploit DB Packet Storm
568 - - - The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site S… - CVE-2024-11605 2024-12-27 15:15 2024-12-27 Show GitHub Exploit DB Packet Storm
569 - - - An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely. - CVE-2024-56521 2024-12-27 14:15 2024-12-27 Show GitHub Exploit DB Packet Storm
570 - - - An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed. - CVE-2024-56520 2024-12-27 14:15 2024-12-27 Show GitHub Exploit DB Packet Storm