Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207271 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0798 2011-05-12 10:46 2011-04-19 Show GitHub Exploit DB Packet Storm
207272 3.5 注意 オラクル - Oracle Fusion Middleware の Single Sign On コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0795 2011-05-12 10:45 2011-04-19 Show GitHub Exploit DB Packet Storm
207273 1.7 注意 オラクル - Oracle Solaris における wbem の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0790 2011-05-12 10:44 2011-04-19 Show GitHub Exploit DB Packet Storm
207274 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle HTTP Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0789 2011-05-12 10:43 2011-04-19 Show GitHub Exploit DB Packet Storm
207275 6.1 警告 FON - La Fonera+ におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-1326 2011-05-11 12:02 2011-05-11 Show GitHub Exploit DB Packet Storm
207276 7.2 危険 シマンテック - Windows のヘルプ機能を使用するアプリケーションにおける権限昇格が可能になる問題 CWE-264
認可・権限・アクセス制御 		CVE-2002-1540
CVE-2005-2017 		2011-05-11 12:01 2011-05-11 Show GitHub Exploit DB Packet Storm
207277 5 警告 オラクル - Oracle Database Server の Network Foundation コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0806 2011-05-11 11:00 2011-04-19 Show GitHub Exploit DB Packet Storm
207278 4.3 警告 オラクル - Oracle Database Server の UIX コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0805 2011-05-11 10:58 2011-04-19 Show GitHub Exploit DB Packet Storm
207279 3.6 注意 オラクル - Oracle Database Server の Database Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0804 2011-05-11 10:58 2011-04-19 Show GitHub Exploit DB Packet Storm
207280 6.5 警告 オラクル - Oracle Database Server の Oracle Warehouse Builder コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0799 2011-05-11 10:57 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 28, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3181 - - - Missing Authorization vulnerability in WPForms Contact Form by WPForms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a thr… CWE-862
 Missing Authorization 		CVE-2024-56276 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3182 - - - Server-Side Request Forgery (SSRF) vulnerability in Envato Envato Elements allows Server Side Request Forgery.This issue affects Envato Elements: from n/a through 2.0.14. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-56275 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3183 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/a throu… CWE-79
Cross-site Scripting 		CVE-2024-56274 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3184 - - - Missing Authorization vulnerability in WPvivid Backup & Migration WPvivid Backup and Migration allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPvivid Backup and Mi… CWE-862
 Missing Authorization 		CVE-2024-56273 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3185 - - - Missing Authorization vulnerability in SecureSubmit WP SecureSubmit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SecureSubmit: from n/a through 1.5.16. CWE-862
 Missing Authorization 		CVE-2024-56271 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3186 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickWhale ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link… CWE-89
SQL Injection 		CVE-2024-51715 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3187 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ? ?? (Minjun Kim) NAVER Analytics allows Stored XSS.This issue affects NAVER Analytics: from n/a … CWE-79
Cross-site Scripting 		CVE-2024-51700 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3188 - - - Missing Authorization vulnerability in CubeWP CubeWP Forms – All-in-One Form Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP Forms – All-in-O… CWE-862
 Missing Authorization 		CVE-2024-51651 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3189 - - - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Abdul Hakeem Build App Online allows PHP Local File Inclusion.This issue affec… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2024-49649 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
3190 - - - Incorrect Privilege Assignment vulnerability in AllAccessible Team Accessibility by AllAccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through 1.3.4. CWE-266
 Incorrect Privilege Assignment 		CVE-2024-49644 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm