Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205451 5 警告 Certec EDV - Certec EDV atvise におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2011-4873 2012-01-24 15:11 2012-01-19 Show GitHub Exploit DB Packet Storm
205452 10 危険 シスコシステムズ - Cisco TelePresence Software における設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4659 2012-01-24 15:09 2012-01-18 Show GitHub Exploit DB Packet Storm
205453 9.3 危険 IBM - IBM SPSS Dimensions および SPSS Data Collection における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-0188 2012-01-23 17:54 2012-01-18 Show GitHub Exploit DB Packet Storm
205454 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の Windows Object Packager 設定における権限昇格の脆弱性 CWE-Other
その他
CVE-2012-0009 2012-01-23 17:52 2012-01-10 Show GitHub Exploit DB Packet Storm
205455 9.3 危険 IBM - IBM SPSS SamplePower の VsVIEW6.ocx における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-0189 2012-01-23 16:33 2012-01-18 Show GitHub Exploit DB Packet Storm
205456 9.3 危険 IBM - IBM SPSS Dimensions および SPSS Data Collection における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-0190 2012-01-23 16:33 2012-01-18 Show GitHub Exploit DB Packet Storm
205457 5 警告 The PHP Group - PHP の tidy_diagnose 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0781 2012-01-23 16:32 2012-01-18 Show GitHub Exploit DB Packet Storm
205458 1.7 注意 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0494 2012-01-23 16:22 2012-01-17 Show GitHub Exploit DB Packet Storm
205459 2.1 注意 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0493 2012-01-23 16:21 2012-01-17 Show GitHub Exploit DB Packet Storm
205460 2.1 注意 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0492 2012-01-23 16:20 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2371 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP2APP allows Reflected XSS. This issue affects WP2APP: from n/a through 2.6.2. CWE-79
Cross-site Scripting
CVE-2025-23811 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2372 - - - Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe allows Reflected XSS. This issue affects Ultimate Subscribe: from n/a through 1.3. CWE-352
 Origin Validation Error
CVE-2025-23806 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2373 - - - Cross-Site Request Forgery (CSRF) vulnerability in PQINA Snippy allows Reflected XSS. This issue affects Snippy: from n/a through 1.4.1. CWE-352
 Origin Validation Error
CVE-2025-23803 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2374 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliott Robson Mass Messaging in BuddyPress allows Reflected XSS. This issue affects Mass Messagin… CWE-79
Cross-site Scripting
CVE-2025-23798 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2375 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows SQL Injection. This issue affects Co… CWE-89
SQL Injection
CVE-2025-23784 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2376 - - - Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WM Options Import Export allows Retrieve Embedded Sensitive Data. This issue affects WM Options Import Export: from n/a thr… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-23781 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2377 - - - Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WPDB to Sql allows Retrieve Embedded Sensitive Data. This issue affects WPDB to Sql: from n/a through 1.2. CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-23774 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2378 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Fast Tube allows Reflected XSS. This issue affects Fast Tube: from n/a through 2.3.1. CWE-79
Cross-site Scripting
CVE-2025-23770 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2379 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Content Mirror allows Reflected XSS. This issue affects Content Mirror: from n/a through… CWE-79
Cross-site Scripting
CVE-2025-23769 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
2380 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound InFunding allows Reflected XSS. This issue affects InFunding: from n/a through 1.0. CWE-79
Cross-site Scripting
CVE-2025-23768 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm