Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
41 5.4 警告
Network 		Brainstorm Force ultimate addons for beaver builder Brainstorm Force の WordPress 用 ultimate addons for beaver builder におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2144 2025-01-31 14:50 2024-03-30 Show GitHub Exploit DB Packet Storm
42 9.8 緊急
Network 		netentsec application security gateway netentsec の application security gateway における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-2646 2025-01-31 14:50 2024-03-19 Show GitHub Exploit DB Packet Storm
43 6.1 警告
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3547 2025-01-31 14:50 2024-05-14 Show GitHub Exploit DB Packet Storm
44 7.8 重要
Local 		Delta Electronics, INC. DIAScreen Delta Electronics, INC. の DIAScreen における境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-39354 2025-01-31 14:50 2024-11-11 Show GitHub Exploit DB Packet Storm
45 5.4 警告
Network 		envothemes envo extra envothemes の WordPress 用 envo extra におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4385 2025-01-31 14:50 2024-05-16 Show GitHub Exploit DB Packet Storm
46 8.8 重要
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-4779 2025-01-31 14:50 2024-05-23 Show GitHub Exploit DB Packet Storm
47 5.4 警告
Network 		Wpmet elementskit Wpmet の WordPress 用 elementskit におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-0321 2025-01-31 14:50 2025-01-28 Show GitHub Exploit DB Packet Storm
48 9.8 緊急
Network 		netentsec application security gateway netentsec の application security gateway における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-2649 2025-01-31 14:50 2024-03-20 Show GitHub Exploit DB Packet Storm
49 8.8 重要
Network 		Delta Electronics, INC. DIAEnergie Delta Electronics, INC. の DIAEnergie における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-34031 2025-01-31 14:50 2024-05-3 Show GitHub Exploit DB Packet Storm
50 4.9 警告
Network 		creativethemes blocksy companion creativethemes の WordPress 用 blocksy companion におけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2024-35633 2025-01-31 14:50 2024-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280021 - working_resources_inc. badblue BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges. NVD-CWE-Other
CVE-2002-1022 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280022 - working_resources_inc. badblue BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI. NVD-CWE-Other
CVE-2002-1023 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280023 - macromedia jrun JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed. NVD-CWE-Other
CVE-2002-1025 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280024 - macromedia sitespring Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly trigger… NVD-CWE-Other
CVE-2002-1026 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280025 - macromedia sitespring Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 50… NVD-CWE-Other
CVE-2002-1027 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280026 - oddsock song_requester Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments. NVD-CWE-Other
CVE-2002-1028 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280027 - worldspan res_manager Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990. NVD-CWE-Other
CVE-2002-1029 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280028 - bea weblogic_server Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections. NVD-CWE-Other
CVE-2002-1030 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280029 - key_focus kf_web_server KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character. NVD-CWE-Other
CVE-2002-1031 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
280030 - key_focus kf_web_server Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header. NVD-CWE-Other
CVE-2002-1032 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm