Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193631 7.5 危険 pegasus - Windows 用の Mercury Mail Transport System におけるバッファオーバーフローの脆弱性 - CVE-2006-5961 2012-09-25 15:36 2006-11-16 Show GitHub Exploit DB Packet Storm
193632 6.8 警告 infinicart - INFINICART におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5958 2012-09-25 15:36 2006-11-16 Show GitHub Exploit DB Packet Storm
193633 7.5 危険 netvios - NetVIOS の page.asp における SQL インジェクションの脆弱性 - CVE-2006-5954 2012-09-25 15:36 2006-11-16 Show GitHub Exploit DB Packet Storm
193634 7.5 危険 lynx internet solutions - Evolve ショッピンングカートの viewcart.asp における SQL インジェクションの脆弱性 - CVE-2006-5953 2012-09-25 15:36 2006-11-16 Show GitHub Exploit DB Packet Storm
193635 7.5 危険 mginternet - MGinternet CSM における SQL インジェクションの脆弱性 - CVE-2006-5945 2012-09-25 15:36 2006-11-16 Show GitHub Exploit DB Packet Storm
193636 6.8 警告 mginternet - MGinternet CSM の csm/asp/listings.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5944 2012-09-25 15:36 2006-11-16 Show GitHub Exploit DB Packet Storm
193637 7.5 危険 iexpress - Estate Agent Manager の admin/default.asp における SQL インジェクションの脆弱性 - CVE-2006-5934 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
193638 7.5 危険 php rapid kill - RapidKill における任意の PHP スクリプトをアップロードされる脆弱性 - CVE-2006-5918 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
193639 7.5 危険 omnistar interactive - OmniStar Article Manager における SQL インジェクションの脆弱性 - CVE-2006-5917 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
193640 5 警告 intego - Intego VirusBarrier におけるウィルス保護を回避される脆弱性 - CVE-2006-5916 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints. New - CVE-2024-42513 2025-02-11 07:15 2025-02-11 Show GitHub Exploit DB Packet Storm
852 - - - Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled. New - CVE-2024-42512 2025-02-11 07:15 2025-02-11 Show GitHub Exploit DB Packet Storm
853 - - - An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect_path parameter of the login redirection functi… Update - CVE-2024-57609 2025-02-11 07:15 2025-02-7 Show GitHub Exploit DB Packet Storm
854 - - - The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors. Update - CVE-2024-25883 2025-02-11 07:15 2025-02-7 Show GitHub Exploit DB Packet Storm
855 6.3 MEDIUM
Network 		- - A vulnerability was found in Allims lab.online up to 20250201 and classified as critical. This issue affects some unknown processing of the file /model/model_recuperar_senha.php. The manipulation of … New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1157 2025-02-11 06:15 2025-02-11 Show GitHub Exploit DB Packet Storm
856 7.3 HIGH
Network 		- - A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login. The manipulation of the argument usuari… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1156 2025-02-11 06:15 2025-02-11 Show GitHub Exploit DB Packet Storm
857 - - - MicroDicom DICOM Viewer version 2024.03 fails to adequately verify the update server's certificate, which could make it possible for attackers in a privileged network position to alter network traff… New CWE-295
Improper Certificate Validation  		CVE-2025-1002 2025-02-11 06:15 2025-02-11 Show GitHub Exploit DB Packet Storm
858 - - - A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of the file /stores of the component Your Location Search. The manipulation leads… New - CVE-2025-1155 2025-02-11 06:15 2025-02-11 Show GitHub Exploit DB Packet Storm
859 - - - Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for … New CWE-502
 Deserialization of Untrusted Data 		CVE-2025-24016 2025-02-11 05:15 2025-02-11 Show GitHub Exploit DB Packet Storm
860 6.3 MEDIUM
Network 		- - A vulnerability, which was classified as critical, has been found in xxyopen Novel up to 3.4.1. Affected by this issue is some unknown functionality of the file /api/front/search/books. The manipulat… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1154 2025-02-11 05:15 2025-02-11 Show GitHub Exploit DB Packet Storm