Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193661 7.2 危険 opendarwin - Apple Mac OS X の XNU におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5836 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
193662 5 警告 OpenSolution - OpenSolution Quick.Cms.Lite の general.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5834 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
193663 4.3 警告 Kayako - Kayako SupportSuite の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5825 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
193664 2.1 注意 Parallels - Mac 用の Parallels Desktop における DHCP 設定を変更される脆弱性 - CVE-2006-5817 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
193665 7.5 危険 Novell - Novell eDirectory における任意のコードを実行される脆弱性 - CVE-2006-5814 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
193666 5 警告 Novell - Novell eDirectory におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5813 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
193667 5 警告 Kerio Technologies - Kerio MailServer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5812 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
193668 6.8 警告 OpenEMR - OpenEMR の library/translation.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5811 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
193669 10 危険 jonathon j. freeman - Jonathon J. Freeman OvBB における脆弱性 - CVE-2006-5809 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
193670 5 警告 マイクロソフト - Microsoft Internet Explorer 7 における安全な Web サイトからのセキュリティの証明書が無効と見なされる脆弱性 - CVE-2006-5805 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 - - - In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access. CWE-22
Path Traversal 		CVE-2024-11343 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1002 - - - An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2025-1212 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1003 6.3 MEDIUM
Network 		- - A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation … CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1206 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1004 - - - An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2025-1042 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1005 - - - An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via… CWE-79
Cross-site Scripting 		CVE-2025-0376 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1006 - - - dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer. - CVE-2024-54160 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1007 - - - A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the availability of Git… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-12379 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1008 - - - In Progress® Telerik® UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements. CWE-77
Command Injection 		CVE-2024-12251 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1009 - - - A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbit… - CVE-2024-54909 2025-02-13 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1010 - - - The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and V11 through R0.22.1 could allow an authenticated attacker to conduct a privilege escalation attack du… - CVE-2025-23093 2025-02-13 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm