Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 17, 2025, 2:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206711 9.3 危険 アップル
アドビシステムズ
レッドハット
ターボリナックス
オラクル
- Adobe Flash に脆弱性 CWE-119
バッファエラー
CVE-2010-3654 2011-02-25 13:50 2010-10-29 Show GitHub Exploit DB Packet Storm
206712 4 警告 サイバートラスト株式会社
MySQL AB
ターボリナックス
レッドハット
- MySQL の sql/spatial.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-3840 2011-02-25 13:48 2010-09-10 Show GitHub Exploit DB Packet Storm
206713 7.8 危険 シスコシステムズ - Cisco IOS の H.323 実装の gk_circuit_info_do_in_acf 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5039 2011-02-24 16:39 2011-01-7 Show GitHub Exploit DB Packet Storm
206714 7.8 危険 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5038 2011-02-24 16:37 2011-01-7 Show GitHub Exploit DB Packet Storm
206715 7.8 危険 シスコシステムズ - Cisco IOS の Neighbor Discovery プロトコル実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4671 2011-02-24 16:35 2011-01-7 Show GitHub Exploit DB Packet Storm
206716 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4682 2011-02-24 16:33 2011-01-7 Show GitHub Exploit DB Packet Storm
206717 7.5 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおける SMTP 検査機能を回避される脆弱性 CWE-noinfo
情報不足
CVE-2010-4681 2011-02-24 16:30 2011-01-7 Show GitHub Exploit DB Packet Storm
206718 9 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスの WebVPN 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4680 2011-02-24 16:28 2011-01-7 Show GitHub Exploit DB Packet Storm
206719 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4679 2011-02-24 16:26 2011-01-7 Show GitHub Exploit DB Packet Storm
206720 7.5 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4678 2011-02-24 16:24 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 17, 2025, 5:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1791 7.5 HIGH
Network
- - The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wp_ajax_nopriv_elvwp_log_download AJAX action. This mak… CWE-22
Path Traversal
CVE-2024-12849 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1792 7.1 HIGH
Network
- - The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page parameter in all versions up to, and including, 5… CWE-79
Cross-site Scripting
CVE-2024-12633 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1793 8.6 HIGH
Network
- - The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4… CWE-862
 Missing Authorization
CVE-2024-12535 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1794 8.8 HIGH
Network
- - The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator plugin for WordPress is vulnerable to arbitrary files uploads due to a missing capability check and fi… CWE-94
Code Injection
CVE-2024-12471 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1795 6.4 MEDIUM
Network
- - The Chatroll Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'chatroll' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sa… CWE-79
Cross-site Scripting
CVE-2024-12464 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1796 6.4 MEDIUM
Network
- - The Candifly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'candifly' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization… CWE-79
Cross-site Scripting
CVE-2024-12440 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1797 6.4 MEDIUM
Network
- - The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input … CWE-79
Cross-site Scripting
CVE-2024-12439 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1798 6.1 MEDIUM
Network
- - The WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'start_date’ and 'end_date' parameters in all versions … CWE-79
Cross-site Scripting
CVE-2024-12438 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1799 6.1 MEDIUM
Network
- - The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page’ parameter in all versions up to, and including, 2.0 due to insufficient input sanitizati… CWE-79
Cross-site Scripting
CVE-2024-12384 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm
1800 6.1 MEDIUM
Network
- - The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmw… CWE-352
 Origin Validation Error
CVE-2024-12383 2025-01-7 15:15 2025-01-7 Show GitHub Exploit DB Packet Storm