Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 8, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
61 6.5 警告
Network 		IBM IBM App Connect Enterprise IBM の IBM App Connect Enterprise における脆弱性 New CWE-248
CWE-Other
CVE-2024-31904 2025-01-8 12:57 2024-05-21 Show GitHub Exploit DB Packet Storm
62 4.3 警告
Network 		IBM IBM App Connect Enterprise IBM の IBM App Connect Enterprise における有効期限後または解放後のリソースの操作に関する脆弱性 New CWE-324
CWE-672
CVE-2024-31893 2025-01-8 12:57 2024-05-21 Show GitHub Exploit DB Packet Storm
63 4.8 警告
Network 		プラネックスコミュニケーションズ株式会社 MZK-DP300N プラネックス製MZK-DP300Nにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-21603 2025-01-8 12:16 2025-01-8 Show GitHub Exploit DB Packet Storm
64 5.5 警告
Local 		- アップルの macOS における脆弱性 New CWE-352
CWE-noinfo
CVE-2024-44293 2025-01-8 12:14 2024-10-28 Show GitHub Exploit DB Packet Storm
65 7.5 重要
Network 		Contiki-NG Contiki-NG Contiki-NG における境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CVE-2023-50927 2025-01-8 11:42 2023-12-15 Show GitHub Exploit DB Packet Storm
66 5.4 警告
Network 		FastLine Media LLC Beaver Builder FastLine Media LLC の WordPress 用 Beaver Builder におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-11832 2025-01-8 11:42 2024-12-13 Show GitHub Exploit DB Packet Storm
67 4.3 警告
Network 		Frenify Categorify - WordPress Media Library Category & File Manager Frenify の WordPress 用 Categorify - WordPress Media Library Category & File Manager における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-1649 2025-01-8 11:42 2024-02-27 Show GitHub Exploit DB Packet Storm
68 4.3 警告
Network 		Frenify Categorify - WordPress Media Library Category & File Manager Frenify の WordPress 用 Categorify - WordPress Media Library Category & File Manager におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-1909 2025-01-8 11:42 2024-02-27 Show GitHub Exploit DB Packet Storm
69 5.4 警告
Network 		WPZOOM beaver builder addons WPZOOM の WordPress 用 beaver builder addons におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2186 2025-01-8 11:42 2024-04-9 Show GitHub Exploit DB Packet Storm
70 5.4 警告
Network 		leevio happy addons for elementor leevio の WordPress 用 happy addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2786 2025-01-8 11:42 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 8, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WOOEXIM.COM WOOEXIM allows SQL Injection.This issue affects WOOEXIM: from n/a through 5.0.0. New CWE-89
SQL Injection 		CVE-2025-22533 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
42 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nagy Sandor Simple Photo Sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/… New CWE-79
Cross-site Scripting 		CVE-2025-22532 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
43 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M Bilal M Urdu Formatter – Shamil allows Stored XSS.This issue affects Urdu Formatter – Shamil: f… New CWE-79
Cross-site Scripting 		CVE-2025-22531 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
44 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SIOT ???? ???? ?? ???? allows Stored XSS.This issue affects ???? ???? ?? ????: from n/a through 1… New CWE-79
Cross-site Scripting 		CVE-2025-22530 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
45 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WORDPRESTEEM WE Blocks allows Stored XSS.This issue affects WE Blocks: from n/a through 1.3.5. New CWE-79
Cross-site Scripting 		CVE-2025-22529 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
46 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Huurkalender Huurkalender WP allows Stored XSS.This issue affects Huurkalender WP: from n/a throu… New CWE-79
Cross-site Scripting 		CVE-2025-22528 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
47 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bharatkambariya Donation Block For PayPal allows Stored XSS.This issue affects Donation Block For… New CWE-79
Cross-site Scripting 		CVE-2025-22525 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
48 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in instaform.ir ??? ??? ??? ????? allows Stored XSS.This issue affects ??? ??? ??? ?????: from n/a t… New CWE-79
Cross-site Scripting 		CVE-2025-22524 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
49 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roya Khosravi SingSong allows Stored XSS.This issue affects SingSong: from n/a through 1.2. New CWE-79
Cross-site Scripting 		CVE-2025-22522 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
50 - - - Cross-Site Request Forgery (CSRF) vulnerability in Tock Tock Widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through 1.1. New CWE-352
 Origin Validation Error 		CVE-2025-22520 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm