Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
581 4.3 警告
Network
exclusiveaddons exclusive addons for elementor exclusiveaddons の WordPress 用 exclusive addons for elementor における脆弱性 CWE-200
CWE-noinfo
CVE-2024-10312 2025-01-27 11:06 2024-10-29 Show GitHub Exploit DB Packet Storm
582 6.1 警告
Network
icopydoc xml for google merchant center icopydoc の WordPress 用 xml for google merchant center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13406 2025-01-27 11:06 2025-01-22 Show GitHub Exploit DB Packet Storm
583 5.4 警告
Network
VideoWhisper.com picture gallery VideoWhisper.com の WordPress 用 picture gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13584 2025-01-27 11:06 2025-01-22 Show GitHub Exploit DB Packet Storm
584 2
Physics
rensas arm-trusted-firmware ルネサス エレクトロニクス株式会社の arm-trusted-firmware における整数オーバーフローの脆弱性 CWE-190
CWE-190
CVE-2024-1633 2025-01-27 11:06 2024-02-19 Show GitHub Exploit DB Packet Storm
585 5.4 警告
Network
exclusiveaddons exclusive addons for elementor exclusiveaddons の WordPress 用 exclusive addons for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2503 2025-01-27 11:06 2024-05-2 Show GitHub Exploit DB Packet Storm
586 9.8 緊急
Network
Sapplica Sentrifugo Sapplica の Sentrifugo における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-29875 2025-01-27 11:06 2024-03-21 Show GitHub Exploit DB Packet Storm
587 6.1 警告
Network
Sapplica Sentrifugo Sapplica の Sentrifugo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-29878 2025-01-27 11:06 2024-03-21 Show GitHub Exploit DB Packet Storm
588 6.5 警告
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-3131 2025-01-27 11:06 2024-04-1 Show GitHub Exploit DB Packet Storm
589 5.4 警告
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3140 2025-01-27 11:06 2024-04-1 Show GitHub Exploit DB Packet Storm
590 5.4 警告
Network
moveaddons move addons for elementor moveaddons の WordPress 用 move addons for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-4695 2025-01-27 11:06 2024-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodegearThemes Designer allows DOM-Based XSS. This issue affects Designer: from n/a through 1.6.0. New CWE-79
Cross-site Scripting
CVE-2025-23987 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
92 - - - Cross-Site Request Forgery (CSRF) vulnerability in Brainvireinfo Dynamic URL SEO allows Cross Site Request Forgery. This issue affects Dynamic URL SEO: from n/a through 1.0. New CWE-352
 Origin Validation Error
CVE-2025-23985 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
93 - - - Cross-Site Request Forgery (CSRF) vulnerability in James Andrews Full Circle allows Stored XSS. This issue affects Full Circle: from n/a through 0.5.7.8. New CWE-352
 Origin Validation Error
CVE-2025-23980 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
94 - - - Cross-Site Request Forgery (CSRF) vulnerability in Ninos Ego FlashCounter allows Stored XSS. This issue affects FlashCounter: from n/a through 1.1.8. New CWE-352
 Origin Validation Error
CVE-2025-23978 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
95 - - - Cross-Site Request Forgery (CSRF) vulnerability in Bhaskar Dhote Post Carousel Slider allows Stored XSS. This issue affects Post Carousel Slider: from n/a through 2.0.1. New CWE-352
 Origin Validation Error
CVE-2025-23977 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
96 - - - Cross-Site Request Forgery (CSRF) vulnerability in Pedro Marcelo Issuu Panel allows Stored XSS. This issue affects Issuu Panel: from n/a through 2.1.1. New CWE-352
 Origin Validation Error
CVE-2025-23976 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
97 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leduchuy89vn Affiliate Tools Vi?t Nam allows Reflected XSS. This issue affects Affiliate Tools Vi… New CWE-79
Cross-site Scripting
CVE-2025-23759 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
98 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fabio Savina WP OpenSearch allows Stored XSS. This issue affects WP OpenSearch: from n/a through … New CWE-79
Cross-site Scripting
CVE-2025-23671 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
99 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Notifikacie.sk Notifikácie.sk allows Reflected XSS. This issue affects Notifikácie.sk: from n/a t… New CWE-79
Cross-site Scripting
CVE-2025-23596 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
100 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk allows Stored XSS. This issue affects CodeBard Help Desk: from n/a th… New CWE-79
Cross-site Scripting
CVE-2025-22757 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm