Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1361 7.5 重要
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2024-8495 2025-01-20 11:06 2024-11-12 Show GitHub Exploit DB Packet Storm
1362 5.5 警告
Local 		Ivanti secure access client Ivanti の secure access client における境界外読み取りに関する脆弱性 CWE-125
CWE-126
CVE-2024-9843 2025-01-20 11:06 2024-11-12 Show GitHub Exploit DB Packet Storm
1363 7.8 重要
Local 		Huawei curiem-wfg9b ファームウェア Huawei の curiem-wfg9b ファームウェアにおける境界外書き込みに関する脆弱性 CWE-119
CWE-787
CVE-2023-52548 2025-01-20 11:05 2024-05-28 Show GitHub Exploit DB Packet Storm
1364 7.8 重要
Local 		Huawei curiem-wfg9b ファームウェア Huawei の curiem-wfg9b ファームウェアにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-284
CWE-401
CVE-2023-52711 2025-01-20 11:04 2024-05-28 Show GitHub Exploit DB Packet Storm
1365 7.8 重要
Local 		paddlepaddle paddlepaddle paddlepaddle におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2024-0817 2025-01-20 11:04 2024-03-7 Show GitHub Exploit DB Packet Storm
1366 9.8 緊急
Network 		paddlepaddle paddlepaddle paddlepaddle における脆弱性 CWE-94
CWE-noinfo
CVE-2024-0917 2025-01-20 11:04 2024-03-7 Show GitHub Exploit DB Packet Storm
1367 4.3 警告
Network 		zixn Buy one click WooCommerce zixn の WordPress 用 Buy one click WooCommerce における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-10853 2025-01-20 11:04 2024-11-13 Show GitHub Exploit DB Packet Storm
1368 4.9 警告
Network 		Basixonline NEX-Forms Basixonline の WordPress 用 NEX-Forms における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-10862 2025-01-20 11:04 2024-12-25 Show GitHub Exploit DB Packet Storm
1369 7.2 重要
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure におけるコマンドインジェクションの脆弱性 CWE-77
CWE-77
CVE-2024-11634 2025-01-20 11:04 2024-12-10 Show GitHub Exploit DB Packet Storm
1370 7.2 重要
Network 		Ivanti cloud services appliance Ivanti の cloud services appliance におけるコマンドインジェクションの脆弱性 CWE-77
CWE-77
CVE-2024-11772 2025-01-20 11:04 2024-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274981 - anna_irc_bot anna\^_irc_bot This vulnerability is addressed in the following product release: Anna^ IRC Bot, Anna^ IRC Bot, 0.30 NVD-CWE-Other
CVE-2006-6190 2011-03-8 11:45 2006-12-1 Show GitHub Exploit DB Packet Storm
274982 - 8pixel.net simple_blog Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and earlier do not properly perform authentication, which allows remote attackers to add users and perform certain other unauth… NVD-CWE-Other
CVE-2006-6192 2011-03-8 11:45 2006-12-1 Show GitHub Exploit DB Packet Storm
274983 - webwiz site_news PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE… CWE-94
Code Injection 		CVE-2006-6212 2011-03-8 11:45 2006-12-1 Show GitHub Exploit DB Packet Storm
274984 - wallpaper wallpaper_complete_website Multiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password … NVD-CWE-Other
CVE-2006-6215 2011-03-8 11:45 2006-12-1 Show GitHub Exploit DB Packet Storm
274985 - coalescent_systems freepbx Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in (1) CALLERID(name) or (2) CALLERID(number). NVD-CWE-Other
CVE-2006-6244 2011-03-8 11:45 2006-12-4 Show GitHub Exploit DB Packet Storm
274986 - coalescent_systems freepbx This vulnerability is addressed in the following product release: Coalescent Systems, freePBX, 2.2.0rc1 NVD-CWE-Other
CVE-2006-6244 2011-03-8 11:45 2006-12-4 Show GitHub Exploit DB Packet Storm
274987 - novell client srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or inval… NVD-CWE-Other
CVE-2006-6307 2011-03-8 11:45 2006-12-5 Show GitHub Exploit DB Packet Storm
274988 - stefan_ritt elog_web_logbook The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service (daemon crash) by attempting to access a logbook whose name begins with… NVD-CWE-Other
CVE-2006-6318 2011-03-8 11:45 2006-12-29 Show GitHub Exploit DB Packet Storm
274989 - stefan_ritt elog_web_logbook Successful exploitation requires authentication only if the application is configured with a password. It is not, by default. NVD-CWE-Other
CVE-2006-6318 2011-03-8 11:45 2006-12-29 Show GitHub Exploit DB Packet Storm
274990 - neocrome seditio Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors related to (1) plugins/ipsearch/ipsearch.admin.php, and (2) pfs/pfs.edit.inc.php, (3) … NVD-CWE-Other
CVE-2006-6344 2011-03-8 11:45 2006-12-7 Show GitHub Exploit DB Packet Storm