Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 21, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209401 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
209402 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 21, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
371 - - - Cross-Site Request Forgery (CSRF) vulnerability in Bas Matthee LSD Google Maps Embedder allows Cross Site Request Forgery.This issue affects LSD Google Maps Embedder: from n/a through 1.1. CWE-352
 Origin Validation Error 		CVE-2025-23871 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
372 - - - Cross-Site Request Forgery (CSRF) vulnerability in Robert Nicholson Copyright Safeguard Footer Notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through 3.0. CWE-352
 Origin Validation Error 		CVE-2025-23870 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
373 - - - Cross-Site Request Forgery (CSRF) vulnerability in Shibu Lijack a.k.a CyberJack CJ Custom Content allows Stored XSS.This issue affects CJ Custom Content: from n/a through 2.0. CWE-352
 Origin Validation Error 		CVE-2025-23869 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
374 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus Liebelt Chess Tempo Viewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n… CWE-79
Cross-site Scripting 		CVE-2025-23868 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
375 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pressfore Winning Portfolio allows Stored XSS.This issue affects Winning Portfolio: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2025-23865 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
376 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Code Snippets (Luke America) WCS QR Code Generator allows Stored XSS.This issue affects WCS QR… CWE-79
Cross-site Scripting 		CVE-2025-23864 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
377 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eiji ‘Sabaoh’ Yamada Rollover Tab allows Stored XSS.This issue affects Rollover Tab: from n/a thr… CWE-79
Cross-site Scripting 		CVE-2025-23863 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
378 - - - Missing Authorization vulnerability in SzMake Contact Form 7 Anti Spambot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 Anti Spambot: from … CWE-862
 Missing Authorization 		CVE-2025-23862 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
379 - - - Cross-Site Request Forgery (CSRF) vulnerability in Katz Web Services, Inc. Debt Calculator allows Cross Site Request Forgery.This issue affects Debt Calculator: from n/a through 1.0.1. CWE-352
 Origin Validation Error 		CVE-2025-23861 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
380 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eyouth { rob.panes } Charity-thermometer allows Stored XSS.This issue affects Charity-thermometer… CWE-79
Cross-site Scripting 		CVE-2025-23860 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm