Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
791 6.7 警告
Local 		ZyXEL NAS 326 ファームウェア
NAS 542 ファームウェア 		ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける脆弱性 CWE-269
CWE-noinfo
CVE-2024-29975 2025-01-24 10:10 2024-06-4 Show GitHub Exploit DB Packet Storm
792 5.4 警告
Network 		XWiki xwiki XWiki の xwiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-352
CVE-2024-31985 2025-01-24 10:10 2024-04-10 Show GitHub Exploit DB Packet Storm
793 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-39667 2025-01-24 10:10 2024-08-1 Show GitHub Exploit DB Packet Storm
794 5.4 警告
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-43231 2025-01-24 10:10 2024-08-12 Show GitHub Exploit DB Packet Storm
795 7.2 重要
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-43282 2025-01-24 10:10 2024-08-18 Show GitHub Exploit DB Packet Storm
796 4.8 警告
Network 		WP Ninjas, LLC. Ninja Forms Saturday Drive の WordPress 用 Ninja Forms におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-50514 2025-01-24 10:10 2024-11-19 Show GitHub Exploit DB Packet Storm
797 8 重要
Network 		wpWax legal pages wpWax の WordPress 用 legal pages におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-863
CVE-2023-50886 2025-01-24 09:59 2023-12-15 Show GitHub Exploit DB Packet Storm
798 6.1 警告
Network 		Themeisle otter blocks ThemeIsle の WordPress 用 otter blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1691 2025-01-24 09:59 2024-03-13 Show GitHub Exploit DB Packet Storm
799 5.4 警告
Network 		properfraction profilepress properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1806 2025-01-24 09:59 2024-03-13 Show GitHub Exploit DB Packet Storm
800 5.4 警告
Network 		WP Ninjas, LLC. Ninja Forms Saturday Drive の WordPress 用 Ninja Forms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2108 2025-01-24 09:59 2024-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1481 - - - A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /\_parse/load\_user-profile.php. The manipulation of the argument … CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1162 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1482 - - - A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation… CWE-1392
 Use of Default Credentials 		CVE-2025-1160 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1483 - - - The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, macOS Sonoma 14.4. Processing web content m… - CVE-2024-54658 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1484 - - - The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, macOS Sonoma 14.4. Processing web content may lead to ar… - CVE-2024-27859 2025-02-12 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1485 - - - Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted… - CVE-2024-57392 2025-02-12 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1486 - - - An issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute arbitrary code via the modelsbyom.py component. - CVE-2024-55241 2025-02-12 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1487 - - - An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attacker… - CVE-2024-53586 2025-02-12 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1488 - - - Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php - CVE-2024-48589 2025-02-12 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1489 - - - Stored Cross Site Scripting(XSS) vulnerability in Egavilan Media Resumes Management and Job Application Website 1.0 allows remote attackers to inject arbitrary code via First and Last Name in Apply F… - CVE-2020-36085 2025-02-12 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1490 - - - Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way… - CVE-2025-22866 2025-02-12 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm