Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194161 4.3 警告 mybulletinboard - MyBB の usercp.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3953 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
194162 7.5 危険 mam-moodle alpha component - Mambo 用の Mam-moodle alpha コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3951 2012-09-25 15:35 2006-07-10 Show GitHub Exploit DB Packet Storm
194163 6.8 警告 Mambo Foundation - Mambo 用の artlinks コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3949 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
194164 6.8 警告 Mambo Foundation - Mambo 用の Mambatstaff における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3947 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
194165 4.9 警告 neoscale systems - NeoScale Systems CryptoStor 700 シリーズアプライアンスにおけるスマートカード認証を回避される脆弱性 - CVE-2006-3896 2012-09-25 15:35 2006-12-19 Show GitHub Exploit DB Packet Storm
194166 7.5 危険 IBM - IBM IDS におけるバッファオーバーフローの脆弱性 - CVE-2006-3862 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
194167 4 警告 IBM - IBM IDS における任意のデータベースを作成される脆弱性 - CVE-2006-3861 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
194168 7.5 危険 IBM - IBM IDS における任意のコマンドを実行される脆弱性 - CVE-2006-3860 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
194169 4 警告 IBM - IBM IDS における任意のファイルを上書きされる脆弱性 - CVE-2006-3859 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
194170 2.1 注意 IBM - IBM IDS におけるパスワードを取得される脆弱性 - CVE-2006-3858 2012-09-25 15:35 2006-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 3.5 LOW
Network 		- - A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /Profile.php. The manipulation of the argument p… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1208 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1162 3.1 LOW
Adjacent 		- - A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler. The manipulation leads to denial of serv… CWE-404
 Improper Resource Shutdown or Release 		CVE-2025-1207 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1163 - - - In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent p… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2025-0556 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1164 - - - Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project … CWE-863
 Incorrect Authorization 		CVE-2025-0516 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1165 - - - In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted director… CWE-22
Path Traversal 		CVE-2025-0332 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1166 - - - An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from t… CWE-441
Confused Deputy 		CVE-2024-9870 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1167 - - - In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command inje… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2024-12629 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1168 - - - In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access. CWE-22
Path Traversal 		CVE-2024-11343 2025-02-13 01:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1169 - - - An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2025-1212 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1170 6.3 MEDIUM
Network 		- - A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation … CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1206 2025-02-13 00:15 2025-02-13 Show GitHub Exploit DB Packet Storm