Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207401 1.9 注意 IBM - IBM WebSphere Application Server における KeyRingPassword のパスワード情報が漏えいする脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-0769 2010-05-27 17:25 2010-04-1 Show GitHub Exploit DB Packet Storm
207402 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0768 2010-05-27 17:25 2010-04-1 Show GitHub Exploit DB Packet Storm
207403 4 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0770 2010-05-27 17:25 2010-04-1 Show GitHub Exploit DB Packet Storm
207404 5 警告 IBM - IBM WebSphere Application Server (WAS) の Administrative Console コンポーネントにおける WAS セッションの内容を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-1898 2010-05-27 17:24 2009-06-3 Show GitHub Exploit DB Packet Storm
207405 6.8 警告 サイバートラスト株式会社
レッドハット		 - TeX Live 2009 および teTeX の dvipsk/dospecial.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1440 2010-05-26 16:33 2010-05-6 Show GitHub Exploit DB Packet Storm
207406 6.8 警告 サイバートラスト株式会社
レッドハット		 - TeX Live および teTeX の predospecial 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0739 2010-05-26 16:32 2010-04-16 Show GitHub Exploit DB Packet Storm
207407 9.3 危険 アドビシステムズ - Adobe Photoshop CS4 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1279 2010-05-26 16:32 2010-04-30 Show GitHub Exploit DB Packet Storm
207408 9.3 危険 レッドハット
freedesktop.org
サイバートラスト株式会社
Glyph & Cog, LLC		 - Xpdf および Poppler の ObjectStream::ObjectStream 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3608 2010-05-26 16:31 2009-10-15 Show GitHub Exploit DB Packet Storm
207409 6.8 警告 サイバートラスト株式会社
レッドハット
CUPS		 - CUPS の pdftops フィルタにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0791 2010-05-26 16:30 2009-06-3 Show GitHub Exploit DB Packet Storm
207410 6.8 警告 レッドハット
Glyph & Cog, LLC
サイバートラスト株式会社
CUPS		 - Xpdf および CUPS におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0195 2010-05-26 16:30 2009-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1931 4.3 MEDIUM
Network 		- - The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdn_remove_shoplogo' AJAX action … CWE-862
 Missing Authorization 		CVE-2024-12210 2024-12-24 15:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1932 6.1 MEDIUM
Network 		- - The Bitcoin Lightning Publisher for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versi… CWE-79
Cross-site Scripting 		CVE-2024-12100 2024-12-24 15:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1933 - - - The Exhibit to WP Gallery WordPress plugin through 0.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be use… - CVE-2024-12096 2024-12-24 15:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1934 5.3 MEDIUM
Network 		- - The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generati… CWE-340
 Generation of Predictable Numbers or Identifiers 		CVE-2024-12034 2024-12-24 15:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1935 6.4 MEDIUM
Network 		- - The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'njtele_button shortcode in all versions up to, and including, 1.0 due to insufficie… CWE-79
Cross-site Scripting 		CVE-2024-11885 2024-12-24 15:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1936 6.1 MEDIUM
Network 		- - The WP-Appbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 4.5.3 due to insufficient input sanitization and outp… CWE-79
Cross-site Scripting 		CVE-2024-12710 2024-12-24 14:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1937 5.4 MEDIUM
Network 		- - The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This … CWE-862
 Missing Authorization 		CVE-2024-12617 2024-12-24 14:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1938 6.4 MEDIUM
Network 		- - The ShMapper by Teplitsa plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shmMap' shortcode in all versions up to, and including, 1.4.18 due to insufficient input s… CWE-79
Cross-site Scripting 		CVE-2024-12518 2024-12-24 14:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1939 6.4 MEDIUM
Network 		- - The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input s… CWE-79
Cross-site Scripting 		CVE-2024-12507 2024-12-24 14:15 2024-12-24 Show GitHub Exploit DB Packet Storm
1940 6.5 MEDIUM
Network 		- - The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elex_dp_export_rules() and elex_dp_import… CWE-862
 Missing Authorization 		CVE-2024-12266 2024-12-24 14:15 2024-12-24 Show GitHub Exploit DB Packet Storm