Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 3, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191561 7.5 危険 eazy cart - Eazy Cart における管理アクセス権を取得される脆弱性 - CVE-2006-5245 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
191562 7.5 危険 Etomite Project - Etomite CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-5242 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
191563 5.1 警告 docmint - Docmint の engine/require.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5240 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
191564 4.3 警告 expblog - eXpBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-5239 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
191565 10 危険 blue smiley organizer - Blue Smiley Organizer のファイルアップロードモジュールにおける詳細不明な脆弱性 - CVE-2006-5238 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
191566 7.5 危険 blue smiley organizer - Blue Smiley Organizer における SQL インジェクションの脆弱性 - CVE-2006-5237 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
191567 7.5 危険 4homepages - 4images の search.php における SQL インジェクションの脆弱性 - CVE-2006-5236 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
191568 7.5 危険 dimension of phpbb - phpBB の Dimension の includes/functions_kb.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5235 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
191569 7.8 危険 Grandstream Networks - Grandstream GXP-2000 VoIP Desktop Phone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5231 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
191570 7.5 危険 freeforum - FreeForum の forum.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5230 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 3, 2024, 8:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1691 6.5 MEDIUM
Network 		kokoroe_members_card_project kokoroe_members_card An information leak in kokoroe_members card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages. NVD-CWE-noinfo
CVE-2023-39045 2024-09-26 00:35 2023-09-21 Show GitHub Exploit DB Packet Storm
1692 7.2 HIGH
Network 		dolibarr dolibarr_erp\/crm An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script. NVD-CWE-noinfo
CVE-2023-38886 2024-09-26 00:35 2023-09-20 Show GitHub Exploit DB Packet Storm
1693 5.5 MEDIUM
Local 		iobit malware_fighter An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS). NVD-CWE-noinfo
CVE-2020-24089 2024-09-26 00:35 2023-09-20 Show GitHub Exploit DB Packet Storm
1694 2.7 LOW
Network 		strapi strapi Strapi is the an open-source headless content management system. Prior to version 4.12.1, field level permissions are not respected in the relationship title. If an actor has relationship title and t… NVD-CWE-noinfo
CVE-2023-37263 2024-09-26 00:35 2023-09-16 Show GitHub Exploit DB Packet Storm
1695 7.8 HIGH
Local 		hp poly_plantronics_hub Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An at… CWE-59
Link Following 		CVE-2024-6147 2024-09-26 00:29 2024-06-21 Show GitHub Exploit DB Packet Storm
1696 5.4 MEDIUM
Network 		greenshiftwp greenshift_-_animation_and_page_builder_blocks Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Stored XSS.This issue affects… CWE-79
Cross-site Scripting 		CVE-2024-44005 2024-09-26 00:25 2024-09-18 Show GitHub Exploit DB Packet Storm
1697 7.8 HIGH
Local 		tungstenautomation kofax_power_pdf Kofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power… CWE-787
 Out-of-bounds Write 		CVE-2024-5303 2024-09-26 00:24 2024-06-7 Show GitHub Exploit DB Packet Storm
1698 7.8 HIGH
Local 		tungstenautomation kofax_power_pdf Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power… CWE-787
 Out-of-bounds Write 		CVE-2024-5302 2024-09-26 00:22 2024-06-7 Show GitHub Exploit DB Packet Storm
1699 7.8 HIGH
Local 		tungstenautomation kofax_power_pdf Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofa… CWE-787
 Out-of-bounds Write 		CVE-2024-5301 2024-09-26 00:18 2024-06-7 Show GitHub Exploit DB Packet Storm
1700 4.8 MEDIUM
Network 		ninjaforms ninja_forms Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saturday Drive Ninja Forms allows Stored XSS.This issue affects Ninja Forms: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2024-43999 2024-09-26 00:15 2024-09-18 Show GitHub Exploit DB Packet Storm