Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 3, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203501 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3523 2011-10-26 16:31 2011-10-18 Show GitHub Exploit DB Packet Storm
203502 4.9 警告 オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3510 2011-10-26 16:30 2011-10-18 Show GitHub Exploit DB Packet Storm
203503 5 警告 オラクル - Oracle WebLogic Server における Web Services の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2320 2011-10-26 16:29 2011-10-18 Show GitHub Exploit DB Packet Storm
203504 4.3 警告 オラクル - Oracle WebLogic Server における JMS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2319 2011-10-26 16:28 2011-10-18 Show GitHub Exploit DB Packet Storm
203505 1.5 注意 オラクル - Oracle WebLogic Server における WLS Security の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2318 2011-10-26 16:27 2011-10-18 Show GitHub Exploit DB Packet Storm
203506 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Containers for J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2314 2011-10-26 16:26 2011-10-18 Show GitHub Exploit DB Packet Storm
203507 6.8 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2255 2011-10-26 16:25 2011-10-18 Show GitHub Exploit DB Packet Storm
203508 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2237 2011-10-26 16:24 2011-10-18 Show GitHub Exploit DB Packet Storm
203509 2.1 注意 アップル - Apple Mac OS X のオープンディレクトリにおけるパスワードデータを閲覧される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-3435 2011-10-26 09:47 2011-10-14 Show GitHub Exploit DB Packet Storm
203510 6.8 警告 アップル - Apple Mac OS X の libsecurity における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3227 2011-10-26 09:46 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 4, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1121 - - - A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Affected by this vulnerability is the function console_log of the file TreasureHunt/checkflag… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-12895 2024-12-22 23:15 2024-12-22 Show GitHub Exploit DB Packet Storm
1122 - - - A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Affected is an unknown function of the file TreasureHunt/acesso.php. The manipulation of t… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-12894 2024-12-22 21:15 2024-12-22 Show GitHub Exploit DB Packet Storm
1123 - - - A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633). - CVE-2024-9154 2024-12-22 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
1124 4.3 MEDIUM
Network 		- - The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabi… CWE-862
 Missing Authorization 		CVE-2024-11852 2024-12-22 11:15 2024-12-22 Show GitHub Exploit DB Packet Storm
1125 5.4 MEDIUM
Network 		- - IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network e… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-51463 2024-12-21 23:15 2024-12-21 Show GitHub Exploit DB Packet Storm
1126 - - - A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argum… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-12884 2024-12-21 23:15 2024-12-21 Show GitHub Exploit DB Packet Storm
1127 - - - A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /_email.php. The manipulati… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2024-12883 2024-12-21 22:15 2024-12-21 Show GitHub Exploit DB Packet Storm
1128 4.9 MEDIUM
Network 		- - The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.2 via the file download… CWE-73
 External Control of File Name or Path 		CVE-2024-12875 2024-12-21 21:15 2024-12-21 Show GitHub Exploit DB Packet Storm
1129 6.4 MEDIUM
Network 		- - The MagicPost plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wb_share_social shortcode in all versions up to, and including, 1.2.1 due to insufficient input saniti… CWE-79
Cross-site Scripting 		CVE-2024-12591 2024-12-21 19:15 2024-12-21 Show GitHub Exploit DB Packet Storm
1130 6.5 MEDIUM
Network 		- - The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions … CWE-862
 Missing Authorization 		CVE-2024-12558 2024-12-21 19:15 2024-12-21 Show GitHub Exploit DB Packet Storm