Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 9, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207081 3 注意 オラクル - Oracle Solaris Studio における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2374 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
207082 4.3 警告 オラクル - Oracle OpenSSO Enterprise における脆弱性 CWE-noinfo
情報不足 		CVE-2009-3762 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
207083 4.3 警告 オラクル - Oracle OpenSSO Enterprise の OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3764 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
207084 4.3 警告 オラクル - Oracle OpenSSO Enterprise の Access Manager / OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3763 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
207085 5 警告 オラクル - Oracle Sun Convergence における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0914 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
207086 5.8 警告 オラクル - Oracle Sun Java System Web Proxy Server の管理サーバにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2385 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
207087 2.1 注意 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise Campus Solutions コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2403 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
207088 3 注意 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2378 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
207089 4 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2377 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
207090 4 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - Time & Labor コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2379 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2071 6.4 MEDIUM
Network 		- - The Spoki – Chat Buttons and WooCommerce Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spoki_button' shortcode in all versions up to, and including… CWE-79
Cross-site Scripting 		CVE-2024-11893 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2072 6.4 MEDIUM
Network 		- - The Category Post Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'category-post-slider' shortcode in all versions up to, and including, 1.4 due to insuffici… CWE-79
Cross-site Scripting 		CVE-2024-11878 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2073 6.1 MEDIUM
Network 		- - The Wtyczka SeoPilot dla WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.091. This is due to missing or incorrect nonce validation on the… CWE-352
 Origin Validation Error 		CVE-2024-11812 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2074 6.1 MEDIUM
Network 		- - The PKT1 Centro de envios plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'success' and 'error' parameters in all versions up to, and including, 1.2.1 due to insufficient… CWE-79
Cross-site Scripting 		CVE-2024-11806 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2075 6.4 MEDIUM
Network 		- - The Sell Tickets Online – TicketSource Ticket Shop for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketshop' shortcode in all versions up to, and i… CWE-79
Cross-site Scripting 		CVE-2024-11784 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2076 6.4 MEDIUM
Network 		- - The Financial Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'finance_calculator' shortcode in all versions up to, and including, 2.2.1 due to insuffici… CWE-79
Cross-site Scripting 		CVE-2024-11783 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2077 6.4 MEDIUM
Network 		- - The Particle Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'particleground' shortcode in all versions up to, and including, 1.0.2 due to insufficient i… CWE-79
Cross-site Scripting 		CVE-2024-11775 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2078 6.4 MEDIUM
Network 		- - The Outdooractive Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'list2go' shortcode in all versions up to, and including, 1.5 due to insufficient input sani… CWE-79
Cross-site Scripting 		CVE-2024-11774 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2079 6.4 MEDIUM
Network 		- - The Spotlightr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotlightr-v' shortcode in all versions up to, and including, 0.1.9 due to insufficient input saniti… CWE-79
Cross-site Scripting 		CVE-2024-11411 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm
2080 6.1 MEDIUM
Network 		- - The ??????? ??????? ??????? ???? ???? plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL i… CWE-79
Cross-site Scripting 		CVE-2024-11331 2024-12-20 16:15 2024-12-20 Show GitHub Exploit DB Packet Storm