Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194161 4.3 警告 mybulletinboard - MyBB の usercp.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3953 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
194162 7.5 危険 mam-moodle alpha component - Mambo 用の Mam-moodle alpha コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3951 2012-09-25 15:35 2006-07-10 Show GitHub Exploit DB Packet Storm
194163 6.8 警告 Mambo Foundation - Mambo 用の artlinks コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3949 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
194164 6.8 警告 Mambo Foundation - Mambo 用の Mambatstaff における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3947 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
194165 4.9 警告 neoscale systems - NeoScale Systems CryptoStor 700 シリーズアプライアンスにおけるスマートカード認証を回避される脆弱性 - CVE-2006-3896 2012-09-25 15:35 2006-12-19 Show GitHub Exploit DB Packet Storm
194166 7.5 危険 IBM - IBM IDS におけるバッファオーバーフローの脆弱性 - CVE-2006-3862 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
194167 4 警告 IBM - IBM IDS における任意のデータベースを作成される脆弱性 - CVE-2006-3861 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
194168 7.5 危険 IBM - IBM IDS における任意のコマンドを実行される脆弱性 - CVE-2006-3860 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
194169 4 警告 IBM - IBM IDS における任意のファイルを上書きされる脆弱性 - CVE-2006-3859 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
194170 2.1 注意 IBM - IBM IDS におけるパスワードを取得される脆弱性 - CVE-2006-3858 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1091 - - - A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to an arbitrary html code. An… - CVE-2024-39272 2025-02-7 04:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1092 - - - MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript… CWE-79
Cross-site Scripting 		CVE-2025-24981 2025-02-7 03:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1093 - - - mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malic… CWE-441
CWE-288
Confused Deputy
Authentication Bypass Using an Alternate Path or Channel 		CVE-2025-23217 2025-02-7 03:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1094 - - - A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter. - CVE-2025-25181 2025-02-7 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1095 - - - Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be us… - CVE-2024-57968 2025-02-7 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1096 5.3 MEDIUM
Local 		- - A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical. This vulnerability affects the function shouldAcceptNewConnection of the file … CWE-285
CWE-266
Improper Authorization
 Incorrect Privilege Assignment 		CVE-2025-1078 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1097 - - - PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s brows… - CVE-2024-57427 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1098 - - - Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Securi… - CVE-2024-13614 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1099 - - - A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57086 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1100 - - - A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57080 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm