Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1011	5.4	警告 Network	Booster	Booster for WooCommerce	Booster の WordPress 用 Booster for WooCommerce におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1534	2025-01-22 16:18	2024-03-7	Show	GitHub Exploit DB Packet Storm

1012	5.4	警告 Network	Ninja Team	wp chat app	Ninja Team の WordPress 用 wp chat app におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1761	2025-01-22 16:18	2024-03-7	Show	GitHub Exploit DB Packet Storm

1013	8.2	重要 Network	ThemeKraft	post form	ThemeKraft の WordPress 用 post form における脆弱性	CWE-noinfo 情報不足	CVE-2024-1170	2025-01-22 16:16	2024-03-7	Show	GitHub Exploit DB Packet Storm

1014	6.5	警告 Network	ZyXEL	USG FLEX 100H ファームウェア atp700 ファームウェア USG FLEX 100AX ファームウェア usg flex 100 ファームウェア ATP200 ファームウェア ATP100 ファームウェア usg f…	複数の ZyXEL 製品における脆弱性	CWE-134 CWE-noinfo	CVE-2023-6399	2025-01-22 15:58	2023-11-30	Show	GitHub Exploit DB Packet Storm

1015	7.5	重要 Network	ThemeKraft	post form	ThemeKraft の WordPress 用 post form における脆弱性	CWE-noinfo 情報不足	CVE-2024-1169	2025-01-22 15:58	2024-03-7	Show	GitHub Exploit DB Packet Storm

1016	5.4	警告 Network	bdthemes	prime slider	bdthemes の WordPress 用 prime slider におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1506	2025-01-22 15:57	2024-03-7	Show	GitHub Exploit DB Packet Storm

1017	7.3	重要 Local	Rockwell Automation	Arena	Rockwell Automation の Arena における初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2024-11364	2025-01-22 15:57	2024-12-19	Show	GitHub Exploit DB Packet Storm

1018	9.8	緊急 Network	The Biosig Project Fedora Project	Fedora libbiosig	The Biosig Project の libbiosig 等複数ベンダの製品における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2024-22097	2025-01-22 15:57	2024-02-20	Show	GitHub Exploit DB Packet Storm

1019	4.9	警告 Network	webtrees.net	webtrees	webtrees.net の webtrees におけるパストラバーサルの脆弱性	CWE-22 CWE-31	CVE-2024-22723	2025-01-22 15:57	2024-02-28	Show	GitHub Exploit DB Packet Storm

1020	9.8	緊急 Network	Fortra	filecatalyst workflow	Fortra の filecatalyst workflow における誤った領域へのリソースの漏えいに関する脆弱性	CWE-472 CWE-668	CVE-2024-25153	2025-01-22 15:57	2024-03-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274691	-	coalescent_systems	freepbx	Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in (1) CALLERID(name) or (2) CALLERID(number).	NVD-CWE-Other	CVE-2006-6244	2011-03-8 11:45	2006-12-4	Show	GitHub Exploit DB Packet Storm

274692	-	coalescent_systems	freepbx	This vulnerability is addressed in the following product release: Coalescent Systems, freePBX, 2.2.0rc1	NVD-CWE-Other	CVE-2006-6244	2011-03-8 11:45	2006-12-4	Show	GitHub Exploit DB Packet Storm

274693	-	novell	client	srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or inval…	NVD-CWE-Other	CVE-2006-6307	2011-03-8 11:45	2006-12-5	Show	GitHub Exploit DB Packet Storm

274694	-	stefan_ritt	elog_web_logbook	The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service (daemon crash) by attempting to access a logbook whose name begins with…	NVD-CWE-Other	CVE-2006-6318	2011-03-8 11:45	2006-12-29	Show	GitHub Exploit DB Packet Storm

274695	-	stefan_ritt	elog_web_logbook	Successful exploitation requires authentication only if the application is configured with a password. It is not, by default.	NVD-CWE-Other	CVE-2006-6318	2011-03-8 11:45	2006-12-29	Show	GitHub Exploit DB Packet Storm

274696	-	neocrome	seditio	Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors related to (1) plugins/ipsearch/ipsearch.admin.php, and (2) pfs/pfs.edit.inc.php, (3) …	NVD-CWE-Other	CVE-2006-6344	2011-03-8 11:45	2006-12-7	Show	GitHub Exploit DB Packet Storm

274697	-	phpnews	phpnews	Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The prov…	NVD-CWE-Other	CVE-2006-6357	2011-03-8 11:45	2006-12-7	Show	GitHub Exploit DB Packet Storm

274698	-	phpnews	phpnews	Successful exploitation requires that "register_globals" is enabled.	NVD-CWE-Other	CVE-2006-6357	2011-03-8 11:45	2006-12-7	Show	GitHub Exploit DB Packet Storm

274699	-	ulrik_petersen	emdros_database_engine emrdos_database_engine	Multiple memory leaks in Ulrik Petersen Emdros Database Engine before 1.2.0.pre231 allow local users to cause a denial of service (memory consumption) via unspecified vectors, a different issue than …	NVD-CWE-Other	CVE-2006-6395	2011-03-8 11:45	2006-12-8	Show	GitHub Exploit DB Packet Storm

274700	-	justsystem	hanako hanako_viewer ichitaro ichitaro_lite2 ichitaro_viewer sanshiro	Buffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004, Ichitaro 2005, Ichitaro Lite2, Ichitaro viewer 4.x, and Sanshiro 2005 allows remote attackers to execute arb…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2006-6400	2011-03-8 11:45	2006-12-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed