Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
661 9.1 緊急
Network 		paddlepaddle paddlepaddle paddlepaddle におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-0818 2025-01-24 14:22 2024-03-7 Show GitHub Exploit DB Packet Storm
662 7.5 重要
Network 		Softing Industrial Automation GmbH edgeConnector
edgeaggregator 		Softing Industrial Automation GmbH の edgeaggregator および edgeConnector における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2024-0860 2025-01-24 14:22 2024-03-14 Show GitHub Exploit DB Packet Storm
663 4.8 警告
Network 		PaperCut Software International Pty PaperCut NG
PaperCut MF 		PaperCut Software International Pty の PaperCut MF および PaperCut NG における脆弱性 CWE-488
CWE-Other
CVE-2024-1223 2025-01-24 14:22 2024-03-14 Show GitHub Exploit DB Packet Storm
664 4.3 警告
Network 		WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements における脆弱性 CWE-359
CWE-Other
CVE-2024-13215 2025-01-24 14:22 2025-01-15 Show GitHub Exploit DB Packet Storm
665 6.5 警告
Network 		GitHub Enterprise Server GitHub の Enterprise Server における不正な認証に関する脆弱性 CWE-863
CWE-863
CVE-2024-1482 2025-01-24 14:22 2024-02-14 Show GitHub Exploit DB Packet Storm
666 8.8 重要
Network 		PluginUs.Net HUSKY - Products Filter for WooCommerce Professional PluginUs.Net の WordPress 用 HUSKY - Products Filter for WooCommerce Professional における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-1795 2025-01-24 14:22 2024-03-15 Show GitHub Exploit DB Packet Storm
667 6.1 警告
Network 		weLaunch WordPress GDPR weLaunch の WordPress 用 WordPress GDPR におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10388 2025-01-24 14:22 2024-11-19 Show GitHub Exploit DB Packet Storm
668 6.5 警告
Network 		Comarch SA Comarch ERP XL Comarch SA の Comarch ERP XL における認証情報の不十分な保護に関する脆弱性 CWE-522
CWE-522
CVE-2023-4538 2025-01-24 14:22 2023-08-25 Show GitHub Exploit DB Packet Storm
669 9.1 緊急
Network 		weLaunch WordPress GDPR weLaunch の WordPress 用 WordPress GDPR における認証の欠如に関する脆弱性 CWE-862
CWE-862
CVE-2024-11069 2025-01-24 14:17 2024-11-19 Show GitHub Exploit DB Packet Storm
670 7.8 重要
Local 		Google Android Google の Android における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-9389 2025-01-24 14:04 2018-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 - - - The Crelly Slider WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks … - CVE-2024-13116 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
802 - - - The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used aga… - CVE-2024-13094 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
803 - - - The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add… - CVE-2024-13057 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
804 - - - The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used a… - CVE-2024-13056 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
805 - - - The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used a… - CVE-2024-13055 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
806 - - - The Dental Optimizer Patient Generator App WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whi… - CVE-2024-13052 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
807 - - - The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks - CVE-2024-12773 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
808 - - - The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks - CVE-2024-12436 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
809 - - - The WC Affiliate WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used agains… - CVE-2024-12321 2025-01-27 15:15 2025-01-27 Show GitHub Exploit DB Packet Storm
810 4.8 MEDIUM
Network 		- - IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get … CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute 		CVE-2024-28771 2025-01-27 11:15 2025-01-27 Show GitHub Exploit DB Packet Storm