Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206791 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2815 2011-10-19 11:17 2011-10-12 Show GitHub Exploit DB Packet Storm
206792 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2813 2011-10-19 11:17 2011-10-12 Show GitHub Exploit DB Packet Storm
206793 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2811 2011-10-19 11:15 2011-10-12 Show GitHub Exploit DB Packet Storm
206794 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2338 2011-10-19 11:14 2011-10-12 Show GitHub Exploit DB Packet Storm
206795 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-3244 2011-10-19 11:14 2011-10-12 Show GitHub Exploit DB Packet Storm
206796 9.3 危険 アップル - Apple iTunes で使用される CoreAudio におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3252 2011-10-19 11:13 2011-10-12 Show GitHub Exploit DB Packet Storm
206797 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の image-parsing ライブラリにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2438 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
206798 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2437 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
206799 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の image-parsing ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2436 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
206800 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2435 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4161 4.4 MEDIUM
Network
- - The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.… CWE-79
Cross-site Scripting
CVE-2024-13519 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4162 4.4 MEDIUM
Network
- - The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title value in all versions up to, and including,… CWE-79
Cross-site Scripting
CVE-2024-13517 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4163 6.4 MEDIUM
Network
- - The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sani… CWE-79
Cross-site Scripting
CVE-2024-13433 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4164 6.1 MEDIUM
Network
- - The Webcamconsult plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on a function. Thi… CWE-352
 Origin Validation Error
CVE-2024-13432 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4165 6.4 MEDIUM
Network
- - The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_videos' shortcode in all versions up to, and i… CWE-79
Cross-site Scripting
CVE-2024-13393 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4166 6.4 MEDIUM
Network
- - The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_content_up… CWE-79
Cross-site Scripting
CVE-2024-13391 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4167 6.4 MEDIUM
Network
- - The JSM Screenshot Machine Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ssm' shortcode in all versions up to, and including, 2.3.0 due to insufficient… CWE-79
Cross-site Scripting
CVE-2024-13385 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4168 4.3 MEDIUM
Network
- - The ShipWorks Connector for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.5. This is due to missing or incorrect nonce validat… CWE-352
 Origin Validation Error
CVE-2024-13317 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4169 6.4 MEDIUM
Network
- - The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all ver… CWE-79
Cross-site Scripting
CVE-2024-12696 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm
4170 6.1 MEDIUM
Network
- - The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status()… CWE-352
 Origin Validation Error
CVE-2024-12385 2025-01-18 16:15 2025-01-18 Show GitHub Exploit DB Packet Storm