Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 4, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191381 2.1 注意 gabriele teotino - Google Desktop 用 Gabriele Teotino GNotebook gadget におけるパスワードを取得される脆弱性 - CVE-2006-6182 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191382 7.5 危険 clicktech - ClickTech ClickContact の default.asp における SQL インジェクションの脆弱性 - CVE-2006-6181 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191383 6.8 警告 Expinion.net - Expinion.net iNews Publisher (iNP) の articles.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6180 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191384 7.2 危険 アップル - Mac OS X の shared_region_make_private_np 関数におけるバッファオーバーフローの脆弱性 - CVE-2006-6173 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191385 7.5 危険 doug luxem - Doug Luxem Liberum Help Desk における SQL インジェクションの脆弱性 - CVE-2006-6161 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191386 7.5 危険 doug luxem - Doug Luxem Liberum Help Desk の details.asp における SQL インジェクションの脆弱性 - CVE-2006-6160 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191387 6.8 警告 deskpro - DeskPRO の newticket.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-6159 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191388 6.8 警告 inverseflow
ace helpdesk
pmos helpdesk		 - PMOS Help Desk におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6158 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191389 2.1 注意 cryptocard - CRYPTOCard CRYPTO-Server における資格情報を取得される脆弱性 - CVE-2006-6145 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191390 4.9 警告 アップル - Apple Mac OS X AppleTalk におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6130 2012-06-26 15:37 2006-11-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 5, 2024, 5:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1621 5.4 MEDIUM
Network 		elementor website_builder The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter of multiple widgets in all versions up to, and in… CWE-79
Cross-site Scripting 		CVE-2024-5416 2024-09-26 23:37 2024-09-11 Show GitHub Exploit DB Packet Storm
1622 - - - Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the … - CVE-2024-44678 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
1623 - - - An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module. - CVE-2024-41708 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
1624 - - - OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timin… - CVE-2024-22893 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
1625 9.8 CRITICAL
Network 		apache submarine ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. As this project is retired, we do… CWE-863
 Incorrect Authorization 		CVE-2024-36265 2024-09-26 23:35 2024-06-13 Show GitHub Exploit DB Packet Storm
1626 5.3 MEDIUM
Network 		azmobileapps color_phone The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.a… NVD-CWE-noinfo
CVE-2023-42468 2024-09-26 23:35 2023-09-14 Show GitHub Exploit DB Packet Storm
1627 7.5 HIGH
Network 		netentsec ns-asg_firmware netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the application security gateway. NVD-CWE-Other
CVE-2023-40850 2024-09-26 23:35 2023-09-14 Show GitHub Exploit DB Packet Storm
1628 9.8 CRITICAL
Network 		apache submarine ** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, w… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-36264 2024-09-26 23:32 2024-06-12 Show GitHub Exploit DB Packet Storm
1629 7.8 HIGH
Local 		luxion keyshot
keyshot_viewer 		Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion Key… CWE-416
 Use After Free 		CVE-2024-30375 2024-09-26 23:24 2024-06-7 Show GitHub Exploit DB Packet Storm
1630 7.8 HIGH
Local 		luxion keyshot
keyshot_viewer 		Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxio… CWE-787
 Out-of-bounds Write 		CVE-2024-30374 2024-09-26 23:22 2024-06-7 Show GitHub Exploit DB Packet Storm