Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
871 7.8 重要
Local
GLPI-PROJECT.ORG glpi agent GLPI-PROJECT.ORG の glpi agent における権限管理に関する脆弱性 CWE-269
CWE-269
CVE-2024-28241 2025-01-23 11:43 2024-04-25 Show GitHub Exploit DB Packet Storm
872 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2892 2025-01-23 11:43 2024-03-26 Show GitHub Exploit DB Packet Storm
873 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2024-2897 2025-01-23 11:43 2024-03-26 Show GitHub Exploit DB Packet Storm
874 5.4 警告
Network
WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-31306 2025-01-23 11:43 2024-04-7 Show GitHub Exploit DB Packet Storm
875 5.4 警告
Network
Jegtheme Jeg Elementor Kit Jegtheme の WordPress 用 Jeg Elementor Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-32721 2025-01-23 11:43 2024-04-24 Show GitHub Exploit DB Packet Storm
876 8.8 重要
Network
Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-4352 2025-01-23 11:43 2024-05-16 Show GitHub Exploit DB Packet Storm
877 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2024-57575 2025-01-23 11:43 2025-01-16 Show GitHub Exploit DB Packet Storm
878 8.8 重要
Network
jfinaloa project jfinaloa jfinaloa project の jfinaloa における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-57775 2025-01-23 11:43 2025-01-16 Show GitHub Exploit DB Packet Storm
879 4.3 警告
Network
Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-2560 2025-01-23 11:42 2024-03-17 Show GitHub Exploit DB Packet Storm
880 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2893 2025-01-23 11:42 2024-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1371 - - - Cross-Site Request Forgery (CSRF) vulnerability in CheGevara Tags to Keywords allows Stored XSS. This issue affects Tags to Keywords: from n/a through 1.0.1. CWE-352
 Origin Validation Error
CVE-2025-22685 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1372 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hakan Ozevin WP BASE Booking allows Stored XSS. This issue affects WP BASE Booking: from n/a thro… CWE-79
Cross-site Scripting
CVE-2025-22684 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1373 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX allows Stored XSS. This issue affects NotificationX: from n/a through 2… CWE-79
Cross-site Scripting
CVE-2025-22683 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1374 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hesabfa Hesabfa Accounting allows Reflected XSS. This issue affects Hesabfa Accounting: from n/a … CWE-79
Cross-site Scripting
CVE-2025-22682 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1375 - - - Missing Authorization vulnerability in Xfinity Soft Content Cloner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Content Cloner: from n/a through 1.0.1. CWE-862
 Missing Authorization
CVE-2025-22681 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1376 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Job Board Manager allows Reflected XSS. This issue affects Job Board Manager: from n/… CWE-79
Cross-site Scripting
CVE-2025-22679 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1377 - - - Missing Authorization vulnerability in UIUX Lab Uix Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Uix Shortcodes: from n/a through 2.0.3. CWE-862
 Missing Authorization
CVE-2025-22677 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1378 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Felipe Peixoto Powerful Auto Chat allows Stored XSS. This issue affects Powerful Auto Chat: from … CWE-79
Cross-site Scripting
CVE-2025-22292 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1379 - - - Missing Authorization vulnerability in Pixelite Meta Tag Manager. This issue affects Meta Tag Manager: from n/a through 3.1. CWE-862
 Missing Authorization
CVE-2025-22260 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1380 - - - Missing Authorization vulnerability in By Averta Shortcodes and extra features for Phlox theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shortcodes a… CWE-862
 Missing Authorization
CVE-2024-50500 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm