Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
301 7.2 重要
Network
mayurik advocate office management system mayurik の advocate office management system における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-3619 2025-01-29 10:43 2024-04-11 Show GitHub Exploit DB Packet Storm
302 7.3 重要
Local
インテル Quartus Prime インテルの Quartus Prime における例外的な状態のチェックに関する脆弱性 CWE-754
CWE-92
CVE-2024-21809 2025-01-29 10:43 2024-05-16 Show GitHub Exploit DB Packet Storm
303 5.4 警告
Network
Electron Technologies FZC Pagelayer Electron Technologies FZC の WordPress 用 Pagelayer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1590 2025-01-29 10:39 2024-02-23 Show GitHub Exploit DB Packet Storm
304 4.3 警告
Network
Extend Themes colibri page builder Extend Themes の WordPress 用 colibri page builder における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-1870 2025-01-29 10:39 2024-03-9 Show GitHub Exploit DB Packet Storm
305 5.5 警告
Local
- IBM の Security Verify Access における初期化されていないリソースの使用に関する脆弱性 CWE-457
CWE-908
CVE-2024-31874 2025-01-29 10:21 2024-04-10 Show GitHub Exploit DB Packet Storm
306 4.9 警告
Network
IBM IBM App Connect Enterprise
IBM Integration Bus
IBM の IBM Integration Bus および IBM App Connect Enterprise におけるエンコードおよびエスケープに関する脆弱性 CWE-116
CWE-117
CVE-2024-22356 2025-01-29 09:57 2024-03-25 Show GitHub Exploit DB Packet Storm
307 7.5 重要
Network
- IBM の Security Verify Access におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2024-31873 2025-01-29 09:38 2024-04-10 Show GitHub Exploit DB Packet Storm
308 8.8 重要
Network
デル Dell PowerMax EEM
Solutions Enabler Virtual Appliance
Dell Unisphere for PowerMax Virtual Appliance
複数のデル製品におけるコマンドインジェクションの脆弱性 CWE-77
CWE-78
CVE-2024-25946 2025-01-28 18:22 2024-03-28 Show GitHub Exploit DB Packet Storm
309 8.8 重要
Network
デル Dell PowerMax EEM
Solutions Enabler Virtual Appliance
Dell Unisphere for PowerMax Virtual Appliance
複数のデル製品におけるコマンドインジェクションの脆弱性 CWE-77
CWE-78
CVE-2024-25955 2025-01-28 18:22 2024-03-28 Show GitHub Exploit DB Packet Storm
310 8.8 重要
Network
UnitedOver Digits UnitedOver の WordPress 用 Digits におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-0203 2025-01-28 18:16 2024-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1201 - - - Insertion of Sensitive Information Into Sent Data vulnerability in UkrSolution Barcode Generator for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Barcode Generator for WooC… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-24597 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1202 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This i… CWE-79
Cross-site Scripting
CVE-2025-24563 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1203 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesome TOGI Awesome Event Booking allows Reflected XSS. This issue affects Awesome Event Booking… CWE-79
Cross-site Scripting
CVE-2025-24560 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1204 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OneTeamSoftware Radio Buttons and Swatches for WooCommerce allows Reflected XSS. This issue affec… CWE-79
Cross-site Scripting
CVE-2025-24551 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1205 - - - Cross-Site Request Forgery (CSRF) vulnerability in Mahbubur Rahman Post Meta allows Reflected XSS. This issue affects Post Meta: from n/a through 1.0.9. CWE-352
 Origin Validation Error
CVE-2025-24549 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1206 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes SKT Donation allows Reflected XSS. This issue affects SKT Donation: from n/a through 1… CWE-79
Cross-site Scripting
CVE-2025-24535 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1207 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emili Castells DPortfolio allows Reflected XSS. This issue affects DPortfolio: from n/a through 2… CWE-79
Cross-site Scripting
CVE-2025-24534 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1208 - - - Cross-Site Request Forgery (CSRF) vulnerability in jablonczay Scroll Styler. This issue affects Scroll Styler: from n/a through 1.1. CWE-352
 Origin Validation Error
CVE-2025-23990 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1209 - - - Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi - SabLab Internal Link Builder allows Cross Site Request Forgery. This issue affects Internal Link Builder: from n/a through 1.0. CWE-352
 Origin Validation Error
CVE-2025-23989 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1210 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodegearThemes Designer allows DOM-Based XSS. This issue affects Designer: from n/a through 1.6.0. CWE-79
Cross-site Scripting
CVE-2025-23987 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm