Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207071 6.8 警告 The PHP Group
アップル		 - PHP の phar 拡張における重要な情報を取得される脆弱性 CWE-134
書式文字列の問題 		CVE-2010-2950 2011-04-1 14:51 2010-05-14 Show GitHub Exploit DB Packet Storm
207072 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0140 2011-03-31 14:39 2011-03-3 Show GitHub Exploit DB Packet Storm
207073 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0139 2011-03-31 14:38 2011-03-3 Show GitHub Exploit DB Packet Storm
207074 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0138 2011-03-31 14:35 2011-03-3 Show GitHub Exploit DB Packet Storm
207075 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0137 2011-03-31 14:34 2011-03-3 Show GitHub Exploit DB Packet Storm
207076 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0136 2011-03-31 14:26 2011-03-3 Show GitHub Exploit DB Packet Storm
207077 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0135 2011-03-31 14:22 2011-03-3 Show GitHub Exploit DB Packet Storm
207078 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0134 2011-03-31 14:20 2011-03-3 Show GitHub Exploit DB Packet Storm
207079 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0133 2011-03-31 14:19 2011-03-3 Show GitHub Exploit DB Packet Storm
207080 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0132 2011-03-31 14:17 2011-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3031 - - - Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-56046 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3032 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS allows SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.5.3. CWE-89
SQL Injection 		CVE-2024-56042 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3033 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP allows SQL Injection.This issue affects VibeBP: from n/a before 1.9.9.5.1. CWE-89
SQL Injection 		CVE-2024-56041 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3034 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP allows SQL Injection.This issue affects VibeBP: from n/a before 1.9.9.7.7. CWE-89
SQL Injection 		CVE-2024-56039 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3035 - - - Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: fro… CWE-862
 Missing Authorization 		CVE-2024-56031 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3036 - - - Missing Authorization vulnerability in WP-CRM WP-CRM System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through 3.2.9.1. CWE-862
 Missing Authorization 		CVE-2024-55991 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3037 - - - Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Subscriptions: from n/a bef… CWE-862
 Missing Authorization 		CVE-2023-50850 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3038 - - - Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2. CWE-862
 Missing Authorization 		CVE-2023-48775 2024-12-31 22:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3039 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWeb WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: … CWE-79
Cross-site Scripting 		CVE-2024-56265 2024-12-31 20:15 2024-12-31 Show GitHub Exploit DB Packet Storm
3040 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andy Fragen Embed PDF Viewer allows Stored XSS.This issue affects Embed PDF Viewer: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2024-56256 2024-12-31 20:15 2024-12-31 Show GitHub Exploit DB Packet Storm