Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 5.4 警告
Network 		WordPress Go Go Custom Field Template WordPress Go Go の WordPress 用 Custom Field Template におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0627 2025-01-30 10:03 2024-06-11 Show GitHub Exploit DB Packet Storm
202 5.4 警告
Network 		Easy Social Feed Easy Social Feed WordPress 用 Easy Social Feed におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1278 2025-01-30 10:03 2024-03-21 Show GitHub Exploit DB Packet Storm
203 5.4 警告
Network 		POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2784 2025-01-30 10:03 2024-05-24 Show GitHub Exploit DB Packet Storm
204 5.5 警告
Local 		xpdfreader project xpdf Glyph & Cog, LLC の Xpdf における再帰制御に関する脆弱性 CWE-674
CWE-674
CVE-2024-3248 2025-01-30 10:03 2024-04-2 Show GitHub Exploit DB Packet Storm
205 6.5 警告
Network 		Eclipse Foundation Eclipse Mosquitto Eclipse Foundation の Eclipse Mosquitto における二重解放に関する脆弱性 CWE-415
CWE-415
CVE-2024-3935 2025-01-30 10:03 2024-10-30 Show GitHub Exploit DB Packet Storm
206 4.3 警告
Network 		Brainstorm Force Elementor Header & Footer Builder Brainstorm Force の WordPress 用 Elementor Header & Footer Builder における脆弱性 CWE-200
CWE-noinfo
CVE-2024-10050 2025-01-30 10:03 2024-10-24 Show GitHub Exploit DB Packet Storm
207 4.3 警告
Network 		wpthemespace magical addons for elementor wpthemespace の WordPress 用 magical addons for elementor における脆弱性 CWE-200
CWE-noinfo
CVE-2024-10352 2025-01-30 10:03 2024-11-9 Show GitHub Exploit DB Packet Storm
208 4.3 警告
Network 		codeless cowidgets elementor addons codeless の WordPress 用 cowidgets elementor addons におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2024-10779 2025-01-30 10:03 2024-11-9 Show GitHub Exploit DB Packet Storm
209 5.3 警告
Network 		WordPress Download Manager download manager wpdownloadmanager の WordPress 用 download manager における脆弱性 CWE-285
CWE-noinfo
CVE-2024-11768 2025-01-30 10:03 2024-12-19 Show GitHub Exploit DB Packet Storm
210 8.8 重要
Network 		bdthemes element pack bdthemes の WordPress 用 element pack における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-30496 2025-01-30 10:03 2024-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1281 - - - An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to… CWE-862
 Missing Authorization 		CVE-2024-1539 2025-02-5 19:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1282 - - - A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike th… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2023-6386 2025-02-5 19:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1283 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if… - CVE-2023-52924 2025-02-5 19:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1284 5.3 MEDIUM
Network 		- - The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.0.8 vi… CWE-200
Information Exposure 		CVE-2024-13829 2025-02-5 15:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1285 - - - This vulnerability allows appliance compromise at boot time. - CVE-2025-24507 2025-02-5 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1286 - - - A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types. - CVE-2025-24506 2025-02-5 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1287 - - - This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file. - CVE-2025-24505 2025-02-5 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1288 - - - NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. - CVE-2025-25246 2025-02-5 14:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1289 - - - Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion a… - CVE-2025-1026 2025-02-5 14:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1290 - - - Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter. - CVE-2025-1025 2025-02-5 14:15 2025-02-5 Show GitHub Exploit DB Packet Storm