Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
41 8.8 重要
Network 		Delta Electronics, INC. DIAEnergie Delta Electronics, INC. の DIAEnergie における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-34032 2025-01-31 15:16 2024-05-3 Show GitHub Exploit DB Packet Storm
42 5.4 警告
Network 		Brainstorm Force Elementor Header & Footer Builder Brainstorm Force の WordPress 用 Elementor Header & Footer Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4634 2025-01-31 15:16 2024-05-16 Show GitHub Exploit DB Packet Storm
43 6.5 警告
Network 		JetBrains YouTrack JetBrains の YouTrack における非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2024-54157 2025-01-31 15:16 2024-12-4 Show GitHub Exploit DB Packet Storm
44 6.1 警告
Network 		JetBrains TeamCity JetBrains の TeamCity におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-24459 2025-01-31 15:16 2025-01-21 Show GitHub Exploit DB Packet Storm
45 6.5 警告
Network 		JetBrains TeamCity JetBrains の TeamCity における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-24461 2025-01-31 15:16 2025-01-21 Show GitHub Exploit DB Packet Storm
46 6.1 警告
Network 		Esri Portal for ArcGIS Esri の Portal for ArcGIS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-8149 2025-01-31 15:01 2024-10-4 Show GitHub Exploit DB Packet Storm
47 4.3 警告
Network 		JetBrains TeamCity JetBrains の TeamCity における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-24460 2025-01-31 15:01 2025-01-21 Show GitHub Exploit DB Packet Storm
48 8.8 重要
Network 		weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-0608 2025-01-31 14:50 2024-03-29 Show GitHub Exploit DB Packet Storm
49 7.2 重要
Network 		weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-0913 2025-01-31 14:50 2024-03-29 Show GitHub Exploit DB Packet Storm
50 5.4 警告
Network 		Brainstorm Force ultimate addons for beaver builder Brainstorm Force の WordPress 用 ultimate addons for beaver builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2140 2025-01-31 14:50 2024-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
991 - - - Missing Authorization vulnerability in Amento Tech Pvt ltd WPGuppy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPGuppy: from n/a through 1.1.0. CWE-862
 Missing Authorization 		CVE-2025-24643 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
992 - - - Missing Authorization vulnerability in theme funda Setup Default Featured Image allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Setup Default Featured Imag… CWE-862
 Missing Authorization 		CVE-2025-24642 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
993 - - - Insertion of Sensitive Information Into Sent Data vulnerability in GREYS Korea for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Korea for WooCommerce: from n/a through 1.1.… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-24639 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
994 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PhiloPress BP Email Assign Templates allows Reflected XSS. This issue affects BP Email Assign Tem… CWE-79
Cross-site Scripting 		CVE-2025-24631 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
995 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Sikshya LMS allows Reflected XSS. This issue affects Sikshya LMS: from n/a through 0.… CWE-79
Cross-site Scripting 		CVE-2025-24630 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
996 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPGear Import Excel to Gravity Forms allows Reflected XSS. This issue affects Import Excel to Gra… CWE-79
Cross-site Scripting 		CVE-2025-24629 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
997 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound AIO Shortcodes allows Stored XSS. This issue affects AIO Shortcodes: from n/a through 1.… CWE-79
Cross-site Scripting 		CVE-2025-24620 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
998 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in realmag777 WOLF allows Path Traversal. This issue affects WOLF: from n/a through 1.0.8.5. CWE-22
Path Traversal 		CVE-2025-24605 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
999 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fatcat Apps Landing Page Cat allows Reflected XSS. This issue affects Landing Page Cat: from n/a … CWE-79
Cross-site Scripting 		CVE-2025-24576 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1000 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev WooCommerce Receipt Uploader allows Reflected XSS. This issue affects P… CWE-79
Cross-site Scripting 		CVE-2025-24574 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm