Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198611 4.6 警告 conti - Conti FTPServer における重要な情報を取得される脆弱性 - CVE-2006-6949 2012-06-26 15:38 2007-01-22 Show GitHub Exploit DB Packet Storm
198612 5 警告 FreeWebshop - FreeWebshop の index.php における重要な情報を取得される脆弱性 - CVE-2006-6941 2012-06-26 15:38 2007-01-18 Show GitHub Exploit DB Packet Storm
198613 4.6 警告 GNU Project - GNU ed における任意のファイルを上書きされる脆弱性 - CVE-2006-6939 2012-06-26 15:38 2007-01-16 Show GitHub Exploit DB Packet Storm
198614 7.8 危険 EFS Software - Easy Chat Server における特定のファイルをダウンロードされる脆弱性 - CVE-2006-6933 2012-06-26 15:38 2007-01-16 Show GitHub Exploit DB Packet Storm
198615 7.5 危険 ga soft - Rapid Classified の viewad.asp における SQL インジェクションの脆弱性 - CVE-2006-6930 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
198616 6.8 警告 ga soft - Rapid Classified におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6929 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
198617 6.8 警告 grandora - Rialto におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6928 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
198618 7.5 危険 grandora - Rialto における SQL インジェクションの脆弱性 - CVE-2006-6927 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
198619 10 危険 extremail - eXtremail におけるバッファオーバーフローの脆弱性 - CVE-2006-6926 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
198620 6.8 警告 Bitweaver - bitweaver におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6925 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
491 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect MediaTek claim an special usb intr interface for ISO data t… New CWE-404
 Improper Resource Shutdown or Release 		CVE-2024-56757 2025-01-8 07:46 2025-01-7 Show GitHub Exploit DB Packet Storm
492 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: check folio mapping after unlock in relocate_one_folio() When we call btrfs_read_folio() to bring a folio uptodate, we unl… New CWE-476
 NULL Pointer Dereference 		CVE-2024-56758 2025-01-8 07:43 2025-01-7 Show GitHub Exploit DB Packet Storm
493 - - - WeGIA is a web manager for charitable institutions. A Cross-Site Scripting (XSS) vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controla_xlsx… New CWE-79
CWE-434
Cross-site Scripting
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22132 2025-01-8 07:15 2025-01-8 Show GitHub Exploit DB Packet Storm
494 - - - An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCT… New - CVE-2024-55410 2025-01-8 07:15 2025-01-8 Show GitHub Exploit DB Packet Storm
495 - - - An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication. New - CVE-2024-54764 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
496 - - - An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication. New - CVE-2024-54763 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
497 - - - The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables any application (with no permissions) to place phone calls without user interac… New - CVE-2024-53935 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
498 - - - An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.… New - CVE-2024-48455 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
499 - - - An issue in the AsusSAIO.sys component of ASUS System Analysis IO v1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. New - CVE-2024-55408 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
500 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. This is not a valid vulnerability. Notes: All references and descriptions in this candidate… New - CVE-2024-10541 2025-01-8 06:15 2025-01-8 Show GitHub Exploit DB Packet Storm