Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1381 8.8 重要
Network 		Fedora Project
レッドハット
Debian
Net-SNMP		 Red Hat Enterprise Linux for Power
 little endian - Extended Update Support
Red Hat Enterprise Linux for IBM … 		Net-SNMP の Net-SNMP 等複数ベンダの製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2022-24805 2025-01-20 10:40 2022-02-10 Show GitHub Exploit DB Packet Storm
1382 6.5 警告
Network 		Fedora Project
レッドハット
Debian
Net-SNMP		 Red Hat Enterprise Linux for Power
 little endian - Extended Update Support
Red Hat Enterprise Linux for IBM … 		Net-SNMP の Net-SNMP 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2022-24808 2025-01-20 10:40 2022-02-10 Show GitHub Exploit DB Packet Storm
1383 8.8 重要
Local 		paddlepaddle paddlepaddle paddlepaddle における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-0815 2025-01-20 10:40 2024-03-7 Show GitHub Exploit DB Packet Storm
1384 6.1 警告
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-11004 2025-01-20 10:40 2024-11-12 Show GitHub Exploit DB Packet Storm
1385 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Stager アドビの Adobe Substance 3D Stager における境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2025-21128 2025-01-20 10:19 2025-01-14 Show GitHub Exploit DB Packet Storm
1386 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Stager アドビの Adobe Substance 3D Stager における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2025-21131 2025-01-20 10:19 2025-01-14 Show GitHub Exploit DB Packet Storm
1387 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他 		CVE-2023-52580 2025-01-20 10:00 2023-09-15 Show GitHub Exploit DB Packet Storm
1388 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2024-35980 2025-01-20 10:00 2024-04-10 Show GitHub Exploit DB Packet Storm
1389 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53166 2025-01-20 10:00 2024-11-29 Show GitHub Exploit DB Packet Storm
1390 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53170 2025-01-20 10:00 2024-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278331 - mantis mantis Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency o… NVD-CWE-Other
CVE-2006-6515 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm
278332 - drupal chatroom_module The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overvie… NVD-CWE-Other
CVE-2006-6529 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm
278333 - oscommerce oscommerce Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_… NVD-CWE-Other
CVE-2006-6534 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm
278334 - cilem cilem_haber Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbitrary web script or HTML via the hata parameter. NOTE: The provenance of this i… NVD-CWE-Other
CVE-2006-6536 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm
278335 - linux-ftpd-ssl linux-ftpd-ssl ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a… NVD-CWE-Other
CVE-2006-5778 2008-09-6 06:13 2006-11-8 Show GitHub Exploit DB Packet Storm
278336 - parallels parallels_desktop prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library/Parallels/.dhcpd_configuration, which allows local users to modify DHCP configuration. NVD-CWE-Other
CVE-2006-5817 2008-09-6 06:13 2006-11-9 Show GitHub Exploit DB Packet Storm
278337 - campware.org campsite Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (… NVD-CWE-Other
CVE-2006-5911 2008-09-6 06:13 2006-11-16 Show GitHub Exploit DB Packet Storm
278338 - campware.org campsite Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords. NVD-CWE-Other
CVE-2006-5912 2008-09-6 06:13 2006-11-16 Show GitHub Exploit DB Packet Storm
278339 - efficientip ipmanager Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter. NOTE: the provenanc… NVD-CWE-Other
CVE-2006-5924 2008-09-6 06:13 2006-11-16 Show GitHub Exploit DB Packet Storm
278340 - phpjobscheduler phpjobscheduler PHP remote file inclusion vulnerability in firepjs.php in Phpjobscheduler 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the installed_config_file parameter. NOTE: the proven… NVD-CWE-Other
CVE-2006-5929 2008-09-6 06:13 2006-11-16 Show GitHub Exploit DB Packet Storm