Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205861 4.3 警告 Google - Google Chrome のソースビュー機能における URL バーを偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3907 2011-12-16 16:12 2011-12-13 Show GitHub Exploit DB Packet Storm
205862 7.5 危険 Google - Google Chrome の FileWatcher におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3917 2011-12-16 16:08 2011-12-13 Show GitHub Exploit DB Packet Storm
205863 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3916 2011-12-16 16:07 2011-12-13 Show GitHub Exploit DB Packet Storm
205864 7.5 危険 Google - Google Chrome におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3915 2011-12-16 16:06 2011-12-13 Show GitHub Exploit DB Packet Storm
205865 7.5 危険 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3914 2011-12-16 16:05 2011-12-13 Show GitHub Exploit DB Packet Storm
205866 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3912 2011-12-16 16:02 2011-12-13 Show GitHub Exploit DB Packet Storm
205867 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3911 2011-12-16 16:01 2011-12-13 Show GitHub Exploit DB Packet Storm
205868 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3910 2011-12-16 15:58 2011-12-13 Show GitHub Exploit DB Packet Storm
205869 5 警告 Google - Google Chrome の PDF パーサーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3906 2011-12-16 15:54 2011-12-13 Show GitHub Exploit DB Packet Storm
205870 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3904 2011-12-16 15:53 2011-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 6.5 MEDIUM
Network 		- - IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transm… New CWE-352
 Origin Validation Error 		CVE-2024-35138 2025-02-5 06:15 2025-02-5 Show GitHub Exploit DB Packet Storm
242 - - - The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against … Update - CVE-2024-13099 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
243 - - - The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be … Update - CVE-2024-13098 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
244 - - - The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against h… Update - CVE-2024-13097 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
245 - - - The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored … Update - CVE-2024-13096 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
246 - - - The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow user… Update - CVE-2024-12768 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
247 - - - The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only mean… Update - CVE-2025-0938 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
248 - - - reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as `penetration_tester` or `auditor` t… New CWE-284
Improper Access Control 		CVE-2025-24968 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
249 - - - reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. An attacker can exp… New CWE-79
Cross-site Scripting 		CVE-2025-24967 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
250 - - - reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary … New CWE-79
Cross-site Scripting 		CVE-2025-24966 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm