Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191511 7.5 危険 Novell - Novell eDirectory および Novell NetMail におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-5478 2012-09-25 15:36 2006-10-24 Show GitHub Exploit DB Packet Storm
191512 7.5 危険 OneOrZero - OneOrZero Helpdesk の "forgot password" 関数におけるアクセス権を取得される脆弱性 - CVE-2006-5474 2012-09-25 15:36 2006-10-24 Show GitHub Exploit DB Packet Storm
191513 7.5 危険 hinton design - Hinton Design の phpht Topsites における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5458 2012-09-25 15:36 2006-10-23 Show GitHub Exploit DB Packet Storm
191514 2.6 注意 Mozilla Foundation - Bugzilla の editversions.cgi におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2006-5455 2012-09-25 15:36 2006-10-15 Show GitHub Exploit DB Packet Storm
191515 5 警告 Mozilla Foundation - Bugzilla における deadline フィールドを取得される脆弱性 - CVE-2006-5454 2012-09-25 15:36 2006-10-15 Show GitHub Exploit DB Packet Storm
191516 3.5 注意 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5453 2012-09-25 15:36 2006-10-15 Show GitHub Exploit DB Packet Storm
191517 7.5 危険 kinesis - KICS の index.asp における SQL インジェクションの脆弱性 - CVE-2006-5450 2012-09-25 15:36 2006-10-23 Show GitHub Exploit DB Packet Storm
191518 6.5 警告 Horde - Horde 用の Ingo モジュールの procmail における任意のコマンドを実行される脆弱性 - CVE-2006-5449 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
191519 7.5 危険 マイクロソフト - Microsoft Windows DRM の drmstor.dll ActiveX オブジェクトにおける任意のコードを実行される脆弱性 - CVE-2006-5448 2012-09-25 15:36 2006-10-23 Show GitHub Exploit DB Packet Storm
191520 2.6 注意 marc giombetti - phpPowerCards の db/txt.inc.php における任意のファイルを上書きされる脆弱性 - CVE-2006-5432 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 - - - Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1. New - CVE-2024-13270 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
332 - - - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Advanced Varnish allows Forceful Browsing.This issue affects Advanced Varnish: from 0.0.0 before 4.0.11. New - CVE-2024-13269 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
333 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno allows PHP Local File Inclusion.This issue affects Opigno: from 7.X-1.0 before … New - CVE-2024-13268 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
334 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno … New - CVE-2024-13267 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
335 - - - Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4. New - CVE-2024-13266 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
336 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learnin… New - CVE-2024-13265 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
337 9.8 CRITICAL
Network 		- - The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.6.4. This is due to the plugin providing user-controlled access to objects, letti… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10215 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
338 - - - Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affec… New CWE-843
Type Confusion 		CVE-2025-22151 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
339 7.5 HIGH
Network 		- - An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an unauthenticated, network-based attacker to send malformed BGP packets t… New CWE-125
Out-of-bounds Read 		CVE-2025-21598 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
340 - - - JWK Set (JSON Web Key Set) is a JWK and JWK Set Go implementation. Prior to 0.6.0, the project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes t… New CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2025-22149 2025-01-10 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm