Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205931 4 警告 One Click Orgs - One Click Orgs におけるサービス運用妨害 (ログイン障害) の脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-4555 2011-12-12 18:18 2011-12-6 Show GitHub Exploit DB Packet Storm
205932 5.5 警告 One Click Orgs - One Click Orgs における巧妙に細工された SMTP トラフィックを誘発する脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4554 2011-12-12 18:15 2011-12-6 Show GitHub Exploit DB Packet Storm
205933 6.9 警告 Celery - Celery における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4356 2011-12-12 18:14 2011-12-5 Show GitHub Exploit DB Packet Storm
205934 7.5 危険 ヒューレット・パッカード - HP Protect Tools Device Access Manager における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-4162 2011-12-12 18:13 2011-12-1 Show GitHub Exploit DB Packet Storm
205935 10 危険 ヒューレット・パッカード - HP CM8060 Color MFP その他の製品のデフォルト設定における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4161 2011-12-12 18:10 2011-11-30 Show GitHub Exploit DB Packet Storm
205936 6.9 警告 マイクロソフト - Microsoft Windows 7 における Internet Explorer サンドボックスの制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4695 2011-12-12 16:39 2011-12-7 Show GitHub Exploit DB Packet Storm
205937 9.3 危険 アップル
アドビシステムズ
マイクロソフト		 - Windows および Mac OS X 上で稼働する Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4694 2011-12-12 16:38 2011-12-7 Show GitHub Exploit DB Packet Storm
205938 9.3 危険 アップル
アドビシステムズ
マイクロソフト		 - Windows および Mac OS X 上で稼働する Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4693 2011-12-12 16:37 2011-12-7 Show GitHub Exploit DB Packet Storm
205939 5 警告 アップル
Google		 - WebKit におけるブラウザキャッシュ内の画像データの存在を推測される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4692 2011-12-12 16:36 2011-12-7 Show GitHub Exploit DB Packet Storm
205940 5 警告 Google - Google Chrome におけるブラウザキャッシュ内の文書の存在を容易に推測される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4691 2011-12-12 16:34 2011-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2011 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Arsovski Google Org Chart allows Stored XSS.This issue affects Google Org Chart: from … CWE-79
Cross-site Scripting 		CVE-2025-23928 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2012 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Massimo Serpilli Incredible Font Awesome allows Stored XSS.This issue affects Incredible Font Awe… CWE-79
Cross-site Scripting 		CVE-2025-23927 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2013 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TC Ajax WP Query Search Filter allows Stored XSS.This issue affects Ajax WP Query Search Filter: … CWE-79
Cross-site Scripting 		CVE-2025-23926 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2014 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jimmy Peña Feedburner Optin Form allows Stored XSS.This issue affects Feedburner Optin Form: from… CWE-79
Cross-site Scripting 		CVE-2025-23925 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2015 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jérémy Heleine WP Photo Sphere allows Stored XSS.This issue affects WP Photo Sphere: from n/a thr… CWE-79
Cross-site Scripting 		CVE-2025-23924 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2016 - - - Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder allows Upload a Web Shell to a Web Server.This issue affects iSpring Embedder: from n/a through 1.0. CWE-352
 Origin Validation Error 		CVE-2025-23922 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2017 - - - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Ella van Durpe Slides & Presentations allows Code Injection.This issue affects Slides & Presentations: f… CWE-80
Basic XSS 		CVE-2025-23919 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2018 - - - Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cha… CWE-862
 Missing Authorization 		CVE-2025-23917 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2019 - - - Missing Authorization vulnerability in Nuanced Media WP Meetup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Meetup: from n/a through 2.3.0. CWE-862
 Missing Authorization 		CVE-2025-23916 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
2020 - - - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roninwp FAT Event Lite allows PHP Local File Inclusion.This issue affects FAT … CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2025-23915 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm