Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
210011 5.8 警告 サイボウズ - 複数のサイボウズ製品におけるアクセス制限に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2029 2010-04-20 12:01 2010-04-20 Show GitHub Exploit DB Packet Storm
210012 9.3 危険 マイクロソフト - Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0805 2010-04-19 19:20 2010-03-30 Show GitHub Exploit DB Packet Storm
210013 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0491 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
210014 4.3 警告 マイクロソフト - Microsoft Internet Explorer における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい
CVE-2010-0494 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
210015 9.3 危険 マイクロソフト - Microsoft Internet Explorer の mstime.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0492 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
210016 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0490 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
210017 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0807 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
210018 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-362
競合状態
CVE-2010-0489 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
210019 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0267 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
210020 10 危険 アップル - Apple Mac OS X の xar におけるパッケージ署名の検証処理に関する脆弱性 CWE-DesignError
CVE-2010-0055 2010-04-16 16:59 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 6.1 MEDIUM
Network
- - The MemorialDay plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on a function. This … New CWE-352
 Origin Validation Error
CVE-2024-13523 2025-02-18 16:15 2025-02-18 Show GitHub Exploit DB Packet Storm
62 - - - Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and ea… New CWE-787
 Out-of-bounds Write
CVE-2024-45320 2025-02-18 15:15 2025-02-18 Show GitHub Exploit DB Packet Storm
63 8.1 HIGH
Network
- - The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization … New CWE-862
 Missing Authorization
CVE-2024-13556 2025-02-18 15:15 2025-02-18 Show GitHub Exploit DB Packet Storm
64 4.3 MEDIUM
Network
- - The SpeedSize Image & Video AI-Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce valida… New CWE-352
 Origin Validation Error
CVE-2024-13438 2025-02-18 15:15 2025-02-18 Show GitHub Exploit DB Packet Storm
65 8.8 HIGH
Network
- - The Shopwarden – Automated WooCommerce monitoring & testing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.11. This is due to missing or in… New CWE-352
 Origin Validation Error
CVE-2024-13315 2025-02-18 15:15 2025-02-18 Show GitHub Exploit DB Packet Storm
66 6.4 MEDIUM
Network
- - The Mortgage Calculator / Loan Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mlcalc' shortcode in all versions up to, and including, 1.5.20 due to ins… New CWE-79
Cross-site Scripting
CVE-2025-0805 2025-02-18 14:15 2025-02-18 Show GitHub Exploit DB Packet Storm
67 4.3 MEDIUM
Network
- - The Mortgage Lead Capture System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.2.10. This is due to missing or incorrect nonce validation on… New CWE-352
 Origin Validation Error
CVE-2025-0796 2025-02-18 14:15 2025-02-18 Show GitHub Exploit DB Packet Storm
68 8.8 HIGH
Network
- - The Option Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the plugin_page() function. This makes it possible for un… New CWE-352
 Origin Validation Error
CVE-2024-13852 2025-02-18 14:15 2025-02-18 Show GitHub Exploit DB Packet Storm
69 5.5 MEDIUM
Network
- - The Reaction Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output… New CWE-79
Cross-site Scripting
CVE-2024-13848 2025-02-18 14:15 2025-02-18 Show GitHub Exploit DB Packet Storm
70 9.8 CRITICAL
Network
- - The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthentic… New CWE-22
Path Traversal
CVE-2024-13725 2025-02-18 14:15 2025-02-18 Show GitHub Exploit DB Packet Storm