Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204911 4.3 警告 シックス・アパート株式会社 - Movable Type の cgi-bin/mt/mt-wizard.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1262 2012-03-6 15:20 2012-03-3 Show GitHub Exploit DB Packet Storm
204912 4.3 警告 IBM - 複数の IBM 製品の Gantt applet viewer におけるクロスサイトスクリプティングの脆弱性 - CVE-2012-0715 2012-03-6 14:44 2012-03-2 Show GitHub Exploit DB Packet Storm
204913 7.8 危険 IBM - IBM AIX および VIOS におけるサービス運用妨害 (システムクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1385 2012-03-6 14:42 2012-02-24 Show GitHub Exploit DB Packet Storm
204914 7.5 危険 Novell - Novell GroupWise のクライアントにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4189 2012-03-6 14:42 2012-02-23 Show GitHub Exploit DB Packet Storm
204915 9.3 危険 IBM - IBM Personal Communications の pcsws.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0201 2012-03-5 15:26 2011-02-20 Show GitHub Exploit DB Packet Storm
204916 7.5 危険 アップル - Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3443 2012-03-5 15:26 2012-03-2 Show GitHub Exploit DB Packet Storm
204917 4.3 警告 ES APP Group - ES ファイルエクスプローラーにおけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0322 2012-03-5 12:02 2012-03-5 Show GitHub Exploit DB Packet Storm
204918 4.3 警告 Ulysses - WordPress 用 Black-LetterHead テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3865 2012-03-5 11:09 2011-09-28 Show GitHub Exploit DB Packet Storm
204919 4.3 警告 Soma Design - WordPress 用 Erudite テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3864 2012-03-5 11:08 2011-09-28 Show GitHub Exploit DB Packet Storm
204920 4.3 警告 Postskriptum - WordPress 用 RedLine テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3863 2012-03-5 11:08 2011-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
631 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. - CVE-2024-47891 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
632 6.4 MEDIUM
Network 		- - The SeatReg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'seatreg' shortcode in all versions up to, and including, 1.56.0 due to insufficient input sanitization … CWE-79
Cross-site Scripting 		CVE-2024-13463 2025-01-31 13:15 2025-01-31 Show GitHub Exploit DB Packet Storm
633 - - - Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers. - CVE-2024-46974 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
634 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2024-13817 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
635 8.1 HIGH
Network 		- - The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all versions up to, and including, 1.9.11. T… CWE-862
 Missing Authorization 		CVE-2024-13767 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
636 6.4 MEDIUM
Network 		- - The Gosign – Posts Slider Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'posts-slider-block' block in all versions up to, and including, 1.1.0 due to insufficient in… CWE-79
Cross-site Scripting 		CVE-2024-13399 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
637 6.4 MEDIUM
Network 		- - The WPRadio – WordPress Radio Streaming Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpradio_player' shortcode in all versions up to, and including, 1.0.… CWE-79
Cross-site Scripting 		CVE-2024-13397 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
638 6.4 MEDIUM
Network 		- - The Frictionless plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'frictionless_form' shortcode[s] in all versions up to, and including, 0.0.23 due to insufficient i… CWE-79
Cross-site Scripting 		CVE-2024-13396 2025-01-31 12:15 2025-01-31 Show GitHub Exploit DB Packet Storm
639 - - - An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem. - CVE-2023-0092 2025-01-31 11:15 2025-01-31 Show GitHub Exploit DB Packet Storm
640 - - - Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. - CVE-2022-1736 2025-01-31 11:15 2025-01-31 Show GitHub Exploit DB Packet Storm