Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
791 6.7 警告
Local 		ZyXEL NAS 326 ファームウェア
NAS 542 ファームウェア 		ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける脆弱性 CWE-269
CWE-noinfo
CVE-2024-29975 2025-01-24 10:10 2024-06-4 Show GitHub Exploit DB Packet Storm
792 5.4 警告
Network 		XWiki xwiki XWiki の xwiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-352
CVE-2024-31985 2025-01-24 10:10 2024-04-10 Show GitHub Exploit DB Packet Storm
793 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-39667 2025-01-24 10:10 2024-08-1 Show GitHub Exploit DB Packet Storm
794 5.4 警告
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-43231 2025-01-24 10:10 2024-08-12 Show GitHub Exploit DB Packet Storm
795 7.2 重要
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-43282 2025-01-24 10:10 2024-08-18 Show GitHub Exploit DB Packet Storm
796 4.8 警告
Network 		WP Ninjas, LLC. Ninja Forms Saturday Drive の WordPress 用 Ninja Forms におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-50514 2025-01-24 10:10 2024-11-19 Show GitHub Exploit DB Packet Storm
797 8 重要
Network 		wpWax legal pages wpWax の WordPress 用 legal pages におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-863
CVE-2023-50886 2025-01-24 09:59 2023-12-15 Show GitHub Exploit DB Packet Storm
798 6.1 警告
Network 		Themeisle otter blocks ThemeIsle の WordPress 用 otter blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1691 2025-01-24 09:59 2024-03-13 Show GitHub Exploit DB Packet Storm
799 5.4 警告
Network 		properfraction profilepress properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1806 2025-01-24 09:59 2024-03-13 Show GitHub Exploit DB Packet Storm
800 5.4 警告
Network 		WP Ninjas, LLC. Ninja Forms Saturday Drive の WordPress 用 Ninja Forms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2108 2025-01-24 09:59 2024-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 - - - The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used again… - CVE-2024-12749 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
462 - - - A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql in… - CVE-2025-0792 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
463 - - - A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId… - CVE-2025-0791 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
464 - - - A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross si… - CVE-2025-0790 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
465 - - - A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It … - CVE-2025-0789 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
466 - - - A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp. The manipulation of the argument id lea… - CVE-2025-0788 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
467 - - - An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in lib/dbi/subscription.c file. - CVE-2024-57519 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
468 - - - Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a session identifier when HSTS is disabled on a victim's browser. After a user logs i… - CVE-2024-56529 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
469 - - - AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers may use these keys to access the backend API or other sensitive information. - CVE-2024-48310 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm
470 - - - A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argum… - CVE-2025-0787 2025-01-30 00:15 2025-01-29 Show GitHub Exploit DB Packet Storm