Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2031 4.8 警告
Network 		emlog emlog emlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CWE-94
CVE-2024-12846 2025-01-14 18:49 2024-12-21 Show GitHub Exploit DB Packet Storm
2032 9.8 緊急
Network 		codezips e-commerce site codezips の e-commerce site における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2024-12884 2025-01-14 18:49 2024-12-21 Show GitHub Exploit DB Packet Storm
2033 5.4 警告
Network 		osuuu lightpicture osuuu の lightpicture におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CWE-94
CVE-2024-13141 2025-01-14 18:49 2025-01-5 Show GitHub Exploit DB Packet Storm
2034 7.5 重要
Network 		lunary lunary lunary における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2024-1738 2025-01-14 18:49 2024-04-16 Show GitHub Exploit DB Packet Storm
2035 9.1 緊急
Network 		lunary lunary lunary における不正な認証に関する脆弱性 CWE-285
CWE-863
CVE-2024-1741 2025-01-14 18:49 2024-04-10 Show GitHub Exploit DB Packet Storm
2036 6.5 警告
Network 		@ScrapyProject Scrapy @ScrapyProject の Scrapy における非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2024-1892 2025-01-14 18:49 2024-02-28 Show GitHub Exploit DB Packet Storm
2037 7.5 重要
Network 		lunary lunary lunary における脆弱性 CWE-821
CWE-Other
CVE-2024-1902 2025-01-14 18:49 2024-04-10 Show GitHub Exploit DB Packet Storm
2038 6.5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc. の Mattermost Server における認証の欠如に関する脆弱性 CWE-200
CWE-862
CVE-2024-23493 2025-01-14 18:49 2024-02-29 Show GitHub Exploit DB Packet Storm
2039 6.5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc. の Mattermost Server における脆弱性 CWE-400
CWE-noinfo
CVE-2024-24988 2025-01-14 18:49 2024-02-29 Show GitHub Exploit DB Packet Storm
2040 5.5 警告
Local 		クアルコム WCN3680B ファームウェア
wcn3980 ファームウェア
sw5100p ファームウェア
WSA8835 ファームウェア
WSA8830 ファームウェア
WCN3660B ファームウェア
sw5100 ファームウェア
qcs8550 ファームウェア
WCN398… 		複数のクアルコム製品における境界外読み取りに関する脆弱性 CWE-125
CWE-126
CVE-2024-33061 2025-01-14 18:49 2024-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 - - - Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just Variables allows Cross Site Request Forgery. This issue affects Just Variables: from n/a through 1.2.3. New CWE-352
 Origin Validation Error 		CVE-2025-27336 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
182 - - - Cross-Site Request Forgery (CSRF) vulnerability in Free plug in by SEO Roma Auto Tag Links allows Cross Site Request Forgery. This issue affects Auto Tag Links: from n/a through 1.0.13. New CWE-352
 Origin Validation Error 		CVE-2025-27335 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
183 - - - Cross-Site Request Forgery (CSRF) vulnerability in gmnazmul Smart Maintenance & Countdown allows Stored XSS. This issue affects Smart Maintenance & Countdown: from n/a through 1.2. New CWE-352
 Origin Validation Error 		CVE-2025-27332 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
184 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sébastien Dumont WooCommerce Display Products by Tags allows DOM-Based XSS. This issue affects Wo… New CWE-79
Cross-site Scripting 		CVE-2025-27331 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
185 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PlayerJS PlayerJS allows DOM-Based XSS. This issue affects PlayerJS: from n/a through 2.23. New CWE-79
Cross-site Scripting 		CVE-2025-27330 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
186 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in inlinkz EZ InLinkz linkup allows DOM-Based XSS. This issue affects EZ InLinkz linkup: from n/a th… New CWE-79
Cross-site Scripting 		CVE-2025-27329 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
187 - - - Cross-Site Request Forgery (CSRF) vulnerability in queeez WP-PostRatings Cheater allows Cross Site Request Forgery. This issue affects WP-PostRatings Cheater: from n/a through 1.5. New CWE-352
 Origin Validation Error 		CVE-2025-27328 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
188 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Winlin Live Streaming Video Player – by SRS Player allows DOM-Based XSS. This issue affects Live … New CWE-79
Cross-site Scripting 		CVE-2025-27327 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
189 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruce Video.js HLS Player allows DOM-Based XSS. This issue affects Video.js HLS Player: from n/a … New CWE-79
Cross-site Scripting 		CVE-2025-27325 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
190 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jon Bishop WP About Author allows DOM-Based XSS. This issue affects WP About Author: from n/a thr… New CWE-79
Cross-site Scripting 		CVE-2025-27323 2025-02-25 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm