Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
541 9.8 緊急
Network 		paddlepaddle paddlepaddle paddlepaddle における脆弱性 CWE-94
CWE-noinfo
CVE-2024-0917 2025-01-20 11:04 2024-03-7 Show GitHub Exploit DB Packet Storm
542 4.3 警告
Network 		zixn Buy one click WooCommerce zixn の WordPress 用 Buy one click WooCommerce における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-10853 2025-01-20 11:04 2024-11-13 Show GitHub Exploit DB Packet Storm
543 4.9 警告
Network 		Basixonline NEX-Forms Basixonline の WordPress 用 NEX-Forms における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-10862 2025-01-20 11:04 2024-12-25 Show GitHub Exploit DB Packet Storm
544 7.2 重要
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure におけるコマンドインジェクションの脆弱性 CWE-77
CWE-77
CVE-2024-11634 2025-01-20 11:04 2024-12-10 Show GitHub Exploit DB Packet Storm
545 7.2 重要
Network 		Ivanti cloud services appliance Ivanti の cloud services appliance におけるコマンドインジェクションの脆弱性 CWE-77
CWE-77
CVE-2024-11772 2025-01-20 11:04 2024-12-10 Show GitHub Exploit DB Packet Storm
546 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-12851 2025-01-20 11:04 2024-12-20 Show GitHub Exploit DB Packet Storm
547 5.4 警告
Network 		Wpmet ElementsKit Elementor addons Wpmet の WordPress 用 ElementsKit Elementor addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10091 2025-01-20 11:04 2024-10-26 Show GitHub Exploit DB Packet Storm
548 5.4 警告
Network 		WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1392 2025-01-20 10:53 2024-03-13 Show GitHub Exploit DB Packet Storm
549 7.2 重要
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-11006 2025-01-20 10:53 2024-11-12 Show GitHub Exploit DB Packet Storm
550 7.2 重要
Network 		Ivanti cloud services appliance Ivanti の cloud services appliance における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2024-11773 2025-01-20 10:53 2024-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 - - - Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3. New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-51919 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
472 - - - Incorrect Privilege Assignment vulnerability in NotFound Homey Login Register allows Privilege Escalation. This issue affects Homey Login Register: from n/a through 2.4.0. New CWE-266
 Incorrect Privilege Assignment 		CVE-2024-51888 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
473 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.… New CWE-89
SQL Injection 		CVE-2024-51818 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
474 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ARPrice allows Reflected XSS. This issue affects ARPrice: from n/a through 4.0.3. New CWE-79
Cross-site Scripting 		CVE-2024-49700 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
475 - - - Deserialization of Untrusted Data vulnerability in NotFound ARPrice allows Object Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49699 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
476 - - - Deserialization of Untrusted Data vulnerability in NotFound ARPrice allows Object Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49688 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
477 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound ARPrice allows SQL Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-89
SQL Injection 		CVE-2024-49666 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
478 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound ARPrice allows SQL Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-89
SQL Injection 		CVE-2024-49655 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
479 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affec… New CWE-89
SQL Injection 		CVE-2024-49333 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
480 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affec… New CWE-89
SQL Injection 		CVE-2024-49303 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm