Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
41 8.8 重要
Network
Delta Electronics, INC. DIAEnergie Delta Electronics, INC. の DIAEnergie における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-34032 2025-01-31 15:16 2024-05-3 Show GitHub Exploit DB Packet Storm
42 5.4 警告
Network
Brainstorm Force Elementor Header & Footer Builder Brainstorm Force の WordPress 用 Elementor Header & Footer Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-4634 2025-01-31 15:16 2024-05-16 Show GitHub Exploit DB Packet Storm
43 6.5 警告
Network
JetBrains YouTrack JetBrains の YouTrack における非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ
CVE-2024-54157 2025-01-31 15:16 2024-12-4 Show GitHub Exploit DB Packet Storm
44 6.1 警告
Network
JetBrains TeamCity JetBrains の TeamCity におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-24459 2025-01-31 15:16 2025-01-21 Show GitHub Exploit DB Packet Storm
45 6.5 警告
Network
JetBrains TeamCity JetBrains の TeamCity における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-24461 2025-01-31 15:16 2025-01-21 Show GitHub Exploit DB Packet Storm
46 6.1 警告
Network
Esri Portal for ArcGIS Esri の Portal for ArcGIS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-8149 2025-01-31 15:01 2024-10-4 Show GitHub Exploit DB Packet Storm
47 4.3 警告
Network
JetBrains TeamCity JetBrains の TeamCity における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2025-24460 2025-01-31 15:01 2025-01-21 Show GitHub Exploit DB Packet Storm
48 8.8 重要
Network
weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-0608 2025-01-31 14:50 2024-03-29 Show GitHub Exploit DB Packet Storm
49 7.2 重要
Network
weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-0913 2025-01-31 14:50 2024-03-29 Show GitHub Exploit DB Packet Storm
50 5.4 警告
Network
Brainstorm Force ultimate addons for beaver builder Brainstorm Force の WordPress 用 ultimate addons for beaver builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2140 2025-01-31 14:50 2024-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1041 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hakan Ozevin WP BASE Booking allows Stored XSS. This issue affects WP BASE Booking: from n/a thro… CWE-79
Cross-site Scripting
CVE-2025-22684 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1042 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX allows Stored XSS. This issue affects NotificationX: from n/a through 2… CWE-79
Cross-site Scripting
CVE-2025-22683 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1043 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hesabfa Hesabfa Accounting allows Reflected XSS. This issue affects Hesabfa Accounting: from n/a … CWE-79
Cross-site Scripting
CVE-2025-22682 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1044 - - - Missing Authorization vulnerability in Xfinity Soft Content Cloner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Content Cloner: from n/a through 1.0.1. CWE-862
 Missing Authorization
CVE-2025-22681 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1045 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Job Board Manager allows Reflected XSS. This issue affects Job Board Manager: from n/… CWE-79
Cross-site Scripting
CVE-2025-22679 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1046 - - - Missing Authorization vulnerability in UIUX Lab Uix Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Uix Shortcodes: from n/a through 2.0.3. CWE-862
 Missing Authorization
CVE-2025-22677 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1047 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Felipe Peixoto Powerful Auto Chat allows Stored XSS. This issue affects Powerful Auto Chat: from … CWE-79
Cross-site Scripting
CVE-2025-22292 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1048 - - - Missing Authorization vulnerability in Pixelite Meta Tag Manager. This issue affects Meta Tag Manager: from n/a through 3.1. CWE-862
 Missing Authorization
CVE-2025-22260 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1049 - - - Missing Authorization vulnerability in By Averta Shortcodes and extra features for Phlox theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shortcodes a… CWE-862
 Missing Authorization
CVE-2024-50500 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1050 - - - Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Privilege Escalation. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through … CWE-266
 Incorrect Privilege Assignment
CVE-2024-43333 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm