Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204551 4.3 警告 g.rodola - pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2009-5011 2012-03-27 18:42 2009-02-27 Show GitHub Exploit DB Packet Storm
204552 6.8 警告 シマンテック - Symantec Altiris Deployment Solution などの製品で使用される Altiris eXpress NS SC Download ActiveX コントロールにおける任意のファイルをダウンロードされる脆弱性 CWE-DesignError
CVE-2009-3028 2012-03-27 18:42 2009-09-14 Show GitHub Exploit DB Packet Storm
204553 4.3 警告 g.rodola - pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2009-5010 2012-03-27 18:42 2008-11-16 Show GitHub Exploit DB Packet Storm
204554 5 警告 IBM - IBM TFIM におけるアサーションを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2008-7299 2012-03-27 18:42 2011-08-12 Show GitHub Exploit DB Packet Storm
204555 5.8 警告 Android - Android の Android ブラウザにおける任意クッキーが上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7298 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
204556 5.8 警告 Opera Software ASA - Opera における任意の Cookie を上書きおよび削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7297 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
204557 5.8 警告 アップル - Apple の Safari における任意のクッキーを上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7296 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
204558 5.8 警告 マイクロソフト - Microsoft Internet Explorer における任意のクッキーを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7295 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
204559 5.8 警告 Google - Google Chrome における任意のクッキーを上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7294 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
204560 5.8 警告 Mozilla Foundation - Mozilla Firefox における任意のクッキーを上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7293 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 5, 2025, 4:56 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 6.4 MEDIUM
Network
- - The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin… CWE-79
Cross-site Scripting
CVE-2024-12037 2025-01-31 20:15 2025-01-31 Show GitHub Exploit DB Packet Storm
482 7.3 HIGH
Network
- - The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.9.4. This is due to the software allowing users to e… CWE-94
Code Injection
CVE-2024-13472 2025-01-31 19:15 2025-01-31 Show GitHub Exploit DB Packet Storm
483 - - - Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On (SSO) allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On (SS… CWE-352
 Origin Validation Error
CVE-2025-24749 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
484 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SWIT WP Sessions Time Monitoring Full Automatic allows Reflected XSS. This issue affects WP Sessi… CWE-79
Cross-site Scripting
CVE-2025-24718 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
485 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcel Pol Gwolle Guestbook allows Reflected XSS. This issue affects Gwolle Guestbook: from n/a t… CWE-79
Cross-site Scripting
CVE-2025-24710 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
486 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paytm Paytm Payment Donation allows Reflected XSS. This issue affects Paytm Payment Donation: fro… CWE-79
Cross-site Scripting
CVE-2025-24635 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
487 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce allows Reflected XSS. This issue affects Advan… CWE-79
Cross-site Scripting
CVE-2025-24632 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
488 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PortOne PORTONE ???? ?? allows Reflected XSS. This issue affects PORTONE ???? ??: from n/a throug… CWE-79
Cross-site Scripting
CVE-2025-24609 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
489 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue allows Reflected XSS. This issue affects GD Mail Queue: from n/a thr… CWE-79
Cross-site Scripting
CVE-2025-24608 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
490 - - - Insertion of Sensitive Information Into Sent Data vulnerability in UkrSolution Barcode Generator for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Barcode Generator for WooC… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-24597 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm