Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
771 8.8 重要
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-37869 2025-01-24 10:44 2023-07-10 Show GitHub Exploit DB Packet Storm
772 7.8 重要
Local 		マイクロフォーカス株式会社 Operations Agent マイクロフォーカス株式会社の Operations Agent における脆弱性 CWE-269
CWE-noinfo
CVE-2024-0622 2025-01-24 10:44 2024-02-15 Show GitHub Exploit DB Packet Storm
773 5.4 警告
Network 		properfraction profilepress properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1409 2025-01-24 10:44 2024-03-13 Show GitHub Exploit DB Packet Storm
774 7.2 重要
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG における脆弱性 CWE-183
CWE-Other
CVE-2024-1654 2025-01-24 10:44 2024-03-14 Show GitHub Exploit DB Packet Storm
775 6.1 警告
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG におけるクロスサイトスクリプティングの脆弱性 CWE-76
CWE-79
CVE-2024-1883 2025-01-24 10:44 2024-03-14 Show GitHub Exploit DB Packet Storm
776 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1997 2025-01-24 10:44 2024-03-13 Show GitHub Exploit DB Packet Storm
777 7.5 重要
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-10400 2025-01-24 10:44 2024-11-21 Show GitHub Exploit DB Packet Storm
778 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスの Junos OS Evolved における脆弱性 CWE-20
CWE-noinfo
CVE-2024-21590 2025-01-24 10:44 2024-04-12 Show GitHub Exploit DB Packet Storm
779 6.7 警告
Local 		F5 Networks BIG-IP Advanced Firewall Manager (AFM)
BIG-IP Analytics
BIG-IP Link Controller
BIG-IP Application Security Manager (ASM)
BIG-IP … 		複数の F5 Networks 製品における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-21782 2025-01-24 10:43 2024-02-14 Show GitHub Exploit DB Packet Storm
780 7.5 重要
Network 		F5 Networks BIG-IP Advanced Firewall Manager (AFM)
BIG-IP Analytics
BIG-IP Link Controller
BIG-IP Application Security Manager (ASM)
BIG-IP … 		複数の F5 Networks 製品における脆弱性 CWE-908
CWE-noinfo
CVE-2024-23314 2025-01-24 10:25 2024-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1351 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EmailPress allows Reflected XSS. This issue affects EmailPress: from n/a through 1.0. CWE-79
Cross-site Scripting 		CVE-2025-23593 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1352 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blu Logistics Pte. Ltd. blu Logistics allows Reflected XSS. This issue affects blu Logistics: fro… CWE-79
Cross-site Scripting 		CVE-2025-23591 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1353 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Burtay Arat Dezdy allows Reflected XSS. This issue affects Dezdy: from n/a through 1.0. CWE-79
Cross-site Scripting 		CVE-2025-23590 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1354 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WOW WordPress WOW Best CSS Compiler allows Reflected XSS. This issue affects WOW Best CSS Compile… CWE-79
Cross-site Scripting 		CVE-2025-23588 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1355 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Haider Ali Bulk Categories Assign allows Reflected XSS. This issue affects Bulk Categories Assign… CWE-79
Cross-site Scripting 		CVE-2025-23582 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1356 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Zoom Studio Demo User DZS allows Stored XSS. This issue affects Demo User DZS: from n/a t… CWE-79
Cross-site Scripting 		CVE-2025-23581 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1357 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound MLL Audio Player MP3 Ajax allows Stored XSS. This issue affects MLL Audio Player MP3 Aja… CWE-79
Cross-site Scripting 		CVE-2025-23561 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1358 - - - Missing Authorization vulnerability in Hemnath Mouli WC Wallet allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WC Wallet: from n/a through 2.2.0. CWE-862
 Missing Authorization 		CVE-2025-23527 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1359 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vikashsrivastava1111989 VSTEMPLATE Creator allows Reflected XSS. This issue affects VSTEMPLATE Cr… CWE-79
Cross-site Scripting 		CVE-2025-23491 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1360 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in idIA Tech Catalog Importer, Scraper & Crawler allows Reflected XSS. This issue affects Catalog Im… CWE-79
Cross-site Scripting 		CVE-2025-22775 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm