Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 12:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206421 4.3 警告 株式会社カワイビジネスソフトウエア - WeblyGo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1330 2011-06-20 12:01 2011-06-20 Show GitHub Exploit DB Packet Storm
206422 - - Autonomy - Autonomy KeyView IDOL に複数の脆弱性 - - 2011-06-20 11:19 2011-06-8 Show GitHub Exploit DB Packet Storm
206423 7.6 危険 シスコシステムズ - Linux および Mac OS 上で稼働する Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2040 2011-06-20 11:12 2011-06-1 Show GitHub Exploit DB Packet Storm
206424 7.6 危険 シスコシステムズ - Windows 上で稼働する Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2039 2011-06-20 11:10 2011-06-1 Show GitHub Exploit DB Packet Storm
206425 9.3 危険 シスコシステムズ - Cisco WebEx WRF Player の atrpui.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2880 2011-06-17 11:28 2009-12-16 Show GitHub Exploit DB Packet Storm
206426 9.3 危険 シスコシステムズ - Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2879 2011-06-17 11:25 2009-12-16 Show GitHub Exploit DB Packet Storm
206427 9.3 危険 シスコシステムズ - Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2878 2011-06-17 11:23 2009-12-16 Show GitHub Exploit DB Packet Storm
206428 9.3 危険 シスコシステムズ - Cisco WebEx WRF Player の ataudio.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2877 2011-06-17 11:18 2009-12-16 Show GitHub Exploit DB Packet Storm
206429 6.3 警告 VMware - 複数の VMware 製品の HGFS におけるゲスト OS 上の任意のファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2145 2011-06-17 10:59 2011-06-2 Show GitHub Exploit DB Packet Storm
206430 6.9 警告 VMware - 複数の VMware 製品の HGFS におけるゲスト OS 上の権限を取得される脆弱性 CWE-362
競合状態
CVE-2011-1787 2011-06-17 10:58 2011-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
521 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AlphaBPO Easy Code Snippets allows SQL Injection.This issue affects Easy Code Snippets: from n/a … CWE-89
SQL Injection
CVE-2025-23780 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
522 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in web-mv.de ResAds allows SQL Injection.This issue affects ResAds: from n/a through 2.0.5. CWE-89
SQL Injection
CVE-2025-23779 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
523 - - - Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Sync ActiveCampaign: fr… CWE-862
 Missing Authorization
CVE-2025-23778 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
524 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Willows Consulting Ltd. GDPR Personal Data Reports allows Stored XSS.This issue affects GDPR Pers… CWE-79
Cross-site Scripting
CVE-2025-23777 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
525 - - - Missing Authorization vulnerability in Thorn Technologies LLC Cache Sniper for Nginx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cache Sniper for Nginx:… CWE-862
 Missing Authorization
CVE-2025-23776 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
526 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WWP GMAPS for WPBakery Page Builder Free allows Stored XSS.This issue affects GMAPS for WPBakery … CWE-79
Cross-site Scripting
CVE-2025-23775 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
527 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eugenio Petullà imaGenius allows Stored XSS.This issue affects imaGenius: from n/a through 1.7. CWE-79
Cross-site Scripting
CVE-2025-23772 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
528 - - - Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER allows Cross Site Request Forgery.This issue affects W3SPEEDSTER: from n/a through 7.33. CWE-352
 Origin Validation Error
CVE-2025-23765 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
529 - - - Missing Authorization vulnerability in Ujjaval Jani Copy Move Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Copy Move Posts: from n/a through 1.6. CWE-862
 Missing Authorization
CVE-2025-23764 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
530 - - - Missing Authorization vulnerability in Alex Volkov Woo Tuner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woo Tuner: from n/a through 0.1.2. CWE-862
 Missing Authorization
CVE-2025-23761 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm