Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206611 5 警告 JSecurity
Apache Software Foundation		 - Apache Shiro および JSecurity におけるアクセス制限を回避される脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3863 2011-06-10 09:52 2010-11-5 Show GitHub Exploit DB Packet Storm
206612 4.3 警告 Apache Software Foundation - Apache CouchDB の Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3854 2011-06-10 09:52 2011-01-28 Show GitHub Exploit DB Packet Storm
206613 4.3 警告 The Dojo Foundation
Apache Software Foundation		 - Apache Struts などで利用される Dojo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6726 2011-06-10 09:51 2009-04-9 Show GitHub Exploit DB Packet Storm
206614 4.3 警告 Apache Software Foundation - Apache Struts の LookupDispatchAction、DispatchAction および ActionDispatcher におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1548 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
206615 7.8 危険 Apache Software Foundation - Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-1547 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
206616 4.3 警告 Apache Software Foundation
レッドハット		 - Apache Struts におけるクロスサイトスクリプティングの脆弱性 - CVE-2005-3745 2011-06-10 09:49 2005-11-22 Show GitHub Exploit DB Packet Storm
206617 4.6 警告 Linux
レッドハット		 - Linux kernel の bond_select_queue 関数におけるサービス運用妨害 (DoS）の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1581 2011-06-9 10:31 2011-05-18 Show GitHub Exploit DB Packet Storm
206618 10 危険 Google
レッドハット		 - Google Chrome におけるアドレスバーを偽装される脆弱性 CWE-DesignError
CVE-2010-3115 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
206619 10 危険 Google
レッドハット		 - Google Chrome の text-editing 実装における脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3114 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
206620 10 危険 Google
レッドハット		 - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-3113 2011-06-9 10:29 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2731 - - - Missing Authorization vulnerability in AyeCode AyeCode Connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AyeCode Connect: from n/a through 1.3.8. CWE-862
 Missing Authorization 		CVE-2024-56255 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2732 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Element… CWE-79
Cross-site Scripting 		CVE-2024-56254 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2733 - - - Missing Authorization vulnerability in supsystic.com Data Tables Generator by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Data Tables Generato… CWE-862
 Missing Authorization 		CVE-2024-56253 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2734 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeLooks Enter Addons allows Stored XSS.This issue affects Enter Addons: from n/a through 2.1.9. CWE-79
Cross-site Scripting 		CVE-2024-56252 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2735 - - - Cross-Site Request Forgery (CSRF) vulnerability in Event Espresso Event Espresso 4 Decaf allows Cross Site Request Forgery.This issue affects Event Espresso 4 Decaf: from n/a through 5.0.28.decaf. CWE-352
 Origin Validation Error 		CVE-2024-56251 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2736 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GregRoss Just Writing Statistics allows SQL Injection.This issue affects Just Writing Statistics:… CWE-89
SQL Injection 		CVE-2024-56250 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2737 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Webdeclic WPMasterToolKit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through 1.13.1. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-56249 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2738 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Webdeclic WPMasterToolKit allows Path Traversal.This issue affects WPMasterToolKit: from n/a through 1.… CWE-22
Path Traversal 		CVE-2024-56248 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2739 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author allows SQL Injection.This issue affects WP Post Author: from n/a through… CWE-89
SQL Injection 		CVE-2024-56247 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
2740 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks allows DOM-Based XSS.This issue affects Nexter Blocks: from n/a through 4.… CWE-79
Cross-site Scripting 		CVE-2024-56246 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm