Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 4, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191381 2.1 注意 gabriele teotino - Google Desktop 用 Gabriele Teotino GNotebook gadget におけるパスワードを取得される脆弱性 - CVE-2006-6182 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191382 7.5 危険 clicktech - ClickTech ClickContact の default.asp における SQL インジェクションの脆弱性 - CVE-2006-6181 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191383 6.8 警告 Expinion.net - Expinion.net iNews Publisher (iNP) の articles.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6180 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191384 7.2 危険 アップル - Mac OS X の shared_region_make_private_np 関数におけるバッファオーバーフローの脆弱性 - CVE-2006-6173 2012-06-26 15:37 2006-11-30 Show GitHub Exploit DB Packet Storm
191385 7.5 危険 doug luxem - Doug Luxem Liberum Help Desk における SQL インジェクションの脆弱性 - CVE-2006-6161 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191386 7.5 危険 doug luxem - Doug Luxem Liberum Help Desk の details.asp における SQL インジェクションの脆弱性 - CVE-2006-6160 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191387 6.8 警告 deskpro - DeskPRO の newticket.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-6159 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191388 6.8 警告 inverseflow
ace helpdesk
pmos helpdesk		 - PMOS Help Desk におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6158 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191389 2.1 注意 cryptocard - CRYPTOCard CRYPTO-Server における資格情報を取得される脆弱性 - CVE-2006-6145 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
191390 4.9 警告 アップル - Apple Mac OS X AppleTalk におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6130 2012-06-26 15:37 2006-11-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 4, 2024, 8:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2431 6.1 MEDIUM
Network 		autocms_project autocms A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross sit… CWE-79
Cross-site Scripting 		CVE-2024-8866 2024-09-21 00:36 2024-09-15 Show GitHub Exploit DB Packet Storm
2432 7.8 HIGH
Local 		watchguard epp_firmware
edr_firmware
epdr_firmware
panda_ad360_firmware 		An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on W… NVD-CWE-noinfo
CVE-2023-26236 2024-09-21 00:35 2023-10-5 Show GitHub Exploit DB Packet Storm
2433 2.7 LOW
Network 		purestorage purity A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock. NVD-CWE-noinfo
CVE-2023-28372 2024-09-21 00:35 2023-10-3 Show GitHub Exploit DB Packet Storm
2434 6.1 MEDIUM
Network 		onlyoffice document_server ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the constructor of the Fun… CWE-79
Cross-site Scripting 		CVE-2023-50883 2024-09-21 00:18 2024-09-10 Show GitHub Exploit DB Packet Storm
2435 - - - Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access. - CVE-2024-27244 2024-09-21 00:15 2024-05-16 Show GitHub Exploit DB Packet Storm
2436 - - - Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access. - CVE-2024-27243 2024-09-21 00:15 2024-05-16 Show GitHub Exploit DB Packet Storm
2437 - - - Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access. - CVE-2024-27247 2024-09-21 00:15 2024-04-10 Show GitHub Exploit DB Packet Storm
2438 - - - Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access. - CVE-2024-24694 2024-09-21 00:15 2024-04-10 Show GitHub Exploit DB Packet Storm
2439 5.5 MEDIUM
Local 		zoom rooms Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access. NVD-CWE-Other
CVE-2024-24693 2024-09-21 00:15 2024-03-14 Show GitHub Exploit DB Packet Storm
2440 - - - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via… - CVE-2024-24691 2024-09-21 00:15 2024-02-14 Show GitHub Exploit DB Packet Storm