Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192441 7.5 危険 opendock - OpenDock Easy Doc における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5243 2012-09-25 15:36 2006-10-11 Show GitHub Exploit DB Packet Storm
192442 5.1 警告 opendock - OpenDock Easy Gallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5241 2012-09-25 15:36 2006-10-11 Show GitHub Exploit DB Packet Storm
192443 2.6 注意 OpenBSD - OpenSSH portable における有効なユーザ名を特定される脆弱性 CWE-200
情報漏えい
CVE-2006-5229 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
192444 7.5 危険 nivisec - phpBB 用の Nivisec User Viewed Posts Tracker モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5223 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
192445 5.1 警告 Objective Development Software GmbH - WebYep における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5220 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
192446 5.1 警告 Moodle - Moodle の blog モジュールの blog/index.php における SQL インジェクションの脆弱性 - CVE-2006-5219 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
192447 4.6 警告 OpenBSD
NetBSD
- OpenBSD などの製品で使用される systrace_preprepl 関数における整数オーバーフローの脆弱性 - CVE-2006-5218 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
192448 7.5 危険 Invision Power Services, Inc - Invision Gallery における SQL インジェクションの脆弱性 - CVE-2006-5206 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
192449 5 警告 Invision Power Services, Inc - Invision Gallery におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5205 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
192450 2.1 注意 Invision Power Services, Inc - IPB の action_admin/member.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5204 2012-09-25 15:36 2006-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jay Carter WP Bulletin Board allows Reflected XSS.This issue affects WP Bulletin Board: from n/a … New CWE-79
Cross-site Scripting
CVE-2025-22776 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
622 - - - Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WPChill Htaccess File Editor allows Exploiting Incorrectly Configured Access Control Security Levels.T… New CWE-538
 File and Directory Information Exposure
CVE-2025-22773 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
623 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7. New CWE-79
Cross-site Scripting
CVE-2025-22769 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
624 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Masoud Amini Zarinpal Paid Download allows Reflected XSS.This issue affects Zarinpal Paid Downloa… New CWE-79
Cross-site Scripting
CVE-2025-22766 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
625 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uri Weil WP Order By allows Reflected XSS.This issue affects WP Order By: from n/a through 1.4.2. New CWE-79
Cross-site Scripting
CVE-2025-22765 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
626 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpwebs Team - VA Jariwala WP Post Corrector allows Reflected XSS.This issue affects WP Post Corre… New CWE-79
Cross-site Scripting
CVE-2025-22764 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
627 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Octrace Studio WordPress HelpDesk & Support Ticket System Plugin – Octrace Support allows Stored … New CWE-79
Cross-site Scripting
CVE-2025-22762 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
628 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Olaf Lederer Ajax Contact Form allows Stored XSS.This issue affects Ajax Contact Form: from n/a t… New CWE-79
Cross-site Scripting
CVE-2025-22761 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
629 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a … New CWE-79
Cross-site Scripting
CVE-2025-22760 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
630 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Stored XSS.This i… New CWE-79
Cross-site Scripting
CVE-2025-22759 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm