Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
81 8.8 重要
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor におけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2023-6743 2025-01-31 11:38 2023-12-12 Show GitHub Exploit DB Packet Storm
82 9.8 緊急
Network 		HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor における脆弱性 New CWE-269
CWE-noinfo
CVE-2023-37999 2025-01-31 11:38 2023-07-11 Show GitHub Exploit DB Packet Storm
83 7.2 重要
Network 		weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-0956 2025-01-31 11:37 2024-03-29 Show GitHub Exploit DB Packet Storm
84 9.8 緊急
Network 		- IBM の Security Verify Access におけるハードコードされた認証情報の使用に関する脆弱性 New CWE-798
ハードコードされた認証情報の使用 		CVE-2024-49805 2025-01-31 11:00 2024-11-29 Show GitHub Exploit DB Packet Storm
85 8.8 重要
Network 		IBM IBM DevOps Deploy
IBM UrbanCode Deploy 		IBM の IBM DevOps Deploy および IBM UrbanCode Deploy におけるセッション期限に関する脆弱性 New CWE-613
不適切なセッション期限 		CVE-2024-22358 2025-01-31 11:00 2024-04-11 Show GitHub Exploit DB Packet Storm
86 5.4 警告
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0367 2025-01-31 10:48 2024-03-30 Show GitHub Exploit DB Packet Storm
87 6.1 警告
Network 		weDevs wp erp weDevs の WordPress 用 wp erp におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0609 2025-01-31 10:48 2024-03-29 Show GitHub Exploit DB Packet Storm
88 7.2 重要
Network 		weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-0952 2025-01-31 10:48 2024-04-9 Show GitHub Exploit DB Packet Storm
89 9.8 緊急
Network 		ThemeREX Addons ThemeREX の WordPress 用 Addons における危険なタイプのファイルの無制限アップロードに関する脆弱性 New CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-13448 2025-01-31 10:48 2025-01-28 Show GitHub Exploit DB Packet Storm
90 4.4 警告
Local 		Google Android Google の Android における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2024-20020 2025-01-31 10:48 2024-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280571 - francisco_burzi php-nuke PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator. NVD-CWE-Other
CVE-2001-0292 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280572 - datawizard ftpxq Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command. NVD-CWE-Other
CVE-2001-0293 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280573 - typsoft typsoft_ftp_server Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command. NVD-CWE-Other
CVE-2001-0294 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280574 - texas_imperial_software wftpd_pro Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. NVD-CWE-Other
CVE-2001-0296 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280575 - dattaraj_rao simple_server Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. NVD-CWE-Other
CVE-2001-0297 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280576 - sapio_design_ltd webreflex Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request. NVD-CWE-Other
CVE-2001-0298 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280577 - pi3 pi3web Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL. NVD-CWE-Other
CVE-2001-0302 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280578 - pi3 pi3web tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file. NVD-CWE-Other
CVE-2001-0303 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280579 - thinking_arts es.one Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartID parameter. NVD-CWE-Other
CVE-2001-0305 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
280580 - itafrica webactive Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. NVD-CWE-Other
CVE-2001-0306 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm