Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 3, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191661 5 警告 david bennett - David Bennett PHPp における任意のプログラム変数を上書きされる脆弱性 - CVE-2006-4877 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191662 7.5 危険 aewebworks - AEDating における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4870 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191663 7.5 危険 gnuturk - GNUTurk 2G の mods.php における SQL インジェクションの脆弱性 - CVE-2006-4867 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191664 4.6 警告 アップル - Apple OS X の kextload におけるバッファオーバーフローの脆弱性 - CVE-2006-4866 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191665 7.5 危険 all enthusiast inc - All Enthusiast ReviewPost の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4864 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191666 7.5 危険 easypagecms - easypage の default.aspx における SQL インジェクションの脆弱性 - CVE-2006-4862 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191667 7.5 危険 clicktech - ClickTech ClickBlog の default.asp における SQL インジェクションの脆弱性 - CVE-2006-4857 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191668 7.5 危険 bolinos - BolinOS の system/_b/contentFiles/gBHTMLEditor.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4851 2012-06-26 15:37 2006-09-18 Show GitHub Exploit DB Packet Storm
191669 5.1 警告 bolinos - BolinOS の system/_b/contentFiles/gBIndex.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4850 2012-06-26 15:37 2006-09-18 Show GitHub Exploit DB Packet Storm
191670 5.1 警告 シトリックス・システムズ - Citrix Access Gateway with AAC における認証を回避される脆弱性 - CVE-2006-4846 2012-06-26 15:37 2006-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 4, 2024, 5:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1771 5.5 MEDIUM
Local 		gpac gpac A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the file src/filters/dmx_m2ts.c of the compone… CWE-476
 NULL Pointer Dereference 		CVE-2024-6063 2024-09-26 01:01 2024-06-18 Show GitHub Exploit DB Packet Storm
1772 6.1 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO busses")… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2024-42224 2024-09-26 00:55 2024-07-30 Show GitHub Exploit DB Packet Storm
1773 6.3 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - Use a default branch in the switch statement to ini… CWE-908
 Use of Uninitialized Resource 		CVE-2024-42161 2024-09-26 00:54 2024-07-30 Show GitHub Exploit DB Packet Storm
1774 9.8 CRITICAL
Network 		lollms lollms A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_endpoint` and `sanitize_path` functions in `lollms_core\lollms\security.py`. This… CWE-22
Path Traversal 		CVE-2024-3429 2024-09-26 00:53 2024-06-7 Show GitHub Exploit DB Packet Storm
1775 7.5 HIGH
Network 		updateproducts_project
simpleimportproduct_project 		updateproducts
simpleimportproduct 		MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php. NVD-CWE-noinfo
CVE-2023-39677 2024-09-26 00:35 2023-09-21 Show GitHub Exploit DB Packet Storm
1776 6.5 MEDIUM
Network 		kokoroe_members_card_project kokoroe_members_card An information leak in kokoroe_members card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages. NVD-CWE-noinfo
CVE-2023-39045 2024-09-26 00:35 2023-09-21 Show GitHub Exploit DB Packet Storm
1777 7.2 HIGH
Network 		dolibarr dolibarr_erp\/crm An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script. NVD-CWE-noinfo
CVE-2023-38886 2024-09-26 00:35 2023-09-20 Show GitHub Exploit DB Packet Storm
1778 5.5 MEDIUM
Local 		iobit malware_fighter An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS). NVD-CWE-noinfo
CVE-2020-24089 2024-09-26 00:35 2023-09-20 Show GitHub Exploit DB Packet Storm
1779 2.7 LOW
Network 		strapi strapi Strapi is the an open-source headless content management system. Prior to version 4.12.1, field level permissions are not respected in the relationship title. If an actor has relationship title and t… NVD-CWE-noinfo
CVE-2023-37263 2024-09-26 00:35 2023-09-16 Show GitHub Exploit DB Packet Storm
1780 7.8 HIGH
Local 		hp poly_plantronics_hub Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An at… CWE-59
Link Following 		CVE-2024-6147 2024-09-26 00:29 2024-06-21 Show GitHub Exploit DB Packet Storm