Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206361 7.5 危険 オラクル - Oracle SysFW の Sun Integrated Lights Out Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2011-2307 2011-08-4 10:10 2011-07-19 Show GitHub Exploit DB Packet Storm
206362 7.5 危険 オラクル - Oracle SPARC Enterprise M Series における XSCF Control Package (XCP) の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2299 2011-08-4 10:08 2011-07-19 Show GitHub Exploit DB Packet Storm
206363 5 警告 オラクル - Oracle Solaris における KSSL の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2298 2011-08-4 10:06 2011-07-19 Show GitHub Exploit DB Packet Storm
206364 6.1 警告 オラクル - Oracle Solaris Cluster における Data Service for WebLogic Server の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2297 2011-08-4 10:05 2011-07-19 Show GitHub Exploit DB Packet Storm
206365 4.9 警告 オラクル - Oracle Solaris における Kernel/SCTP の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2296 2011-08-4 10:05 2011-07-19 Show GitHub Exploit DB Packet Storm
206366 4.7 警告 オラクル - Oracle Solaris における Driver/USB の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2295 2011-08-4 10:04 2011-07-19 Show GitHub Exploit DB Packet Storm
206367 5 警告 オラクル - Oracle Solaris における SSH の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2294 2011-08-4 10:03 2011-07-19 Show GitHub Exploit DB Packet Storm
206368 4.9 警告 オラクル - Oracle Solaris における Zones の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2293 2011-08-4 10:02 2011-07-19 Show GitHub Exploit DB Packet Storm
206369 1.7 注意 オラクル - Oracle Solaris における Trusted Extensions の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2291 2011-08-4 10:01 2011-07-19 Show GitHub Exploit DB Packet Storm
206370 9.3 危険 アドビシステムズ
レッドハット
オラクル		 - Adobe Flash Player における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0628 2011-08-4 09:15 2011-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
641 6.4 MEDIUM
Network 		- - The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘list_tag’ parameter in all versions up to, and including, 3.6.2 due to insufficient input sanitization and out… CWE-79
Cross-site Scripting 		CVE-2025-0369 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
642 4.4 MEDIUM
Network 		- - The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.… CWE-79
Cross-site Scripting 		CVE-2024-13519 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
643 4.4 MEDIUM
Network 		- - The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title value in all versions up to, and including,… CWE-79
Cross-site Scripting 		CVE-2024-13517 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
644 6.4 MEDIUM
Network 		- - The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sani… CWE-79
Cross-site Scripting 		CVE-2024-13433 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
645 6.1 MEDIUM
Network 		- - The Webcamconsult plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on a function. Thi… CWE-352
 Origin Validation Error 		CVE-2024-13432 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
646 6.4 MEDIUM
Network 		- - The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_videos' shortcode in all versions up to, and i… CWE-79
Cross-site Scripting 		CVE-2024-13393 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
647 6.4 MEDIUM
Network 		- - The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_content_up… CWE-79
Cross-site Scripting 		CVE-2024-13391 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
648 6.4 MEDIUM
Network 		- - The JSM Screenshot Machine Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ssm' shortcode in all versions up to, and including, 2.3.0 due to insufficient… CWE-79
Cross-site Scripting 		CVE-2024-13385 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
649 4.3 MEDIUM
Network 		- - The ShipWorks Connector for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.5. This is due to missing or incorrect nonce validat… CWE-352
 Origin Validation Error 		CVE-2024-13317 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
650 6.4 MEDIUM
Network 		- - The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all ver… CWE-79
Cross-site Scripting 		CVE-2024-12696 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm