Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198631 4.3 警告 flock - Flock におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2006-6954 2012-06-26 15:38 2007-01-29 Show GitHub Exploit DB Packet Storm
198632 2.1 注意 globetrotter - GlobeTrotter Mobility Manager におけるパスワードなど任意のキーストロークをキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2006-6953 2012-06-26 15:38 2007-01-29 Show GitHub Exploit DB Packet Storm
198633 7.2 危険 CA Technologies - Computer Associates HIPS ドライバの Core kmxstart.sys におけるユーザ権限を取得される脆弱性 - CVE-2006-6952 2012-06-26 15:38 2007-01-24 Show GitHub Exploit DB Packet Storm
198634 5 警告 conti - Conti FTPServer におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6950 2012-06-26 15:38 2007-01-22 Show GitHub Exploit DB Packet Storm
198635 4.6 警告 conti - Conti FTPServer における重要な情報を取得される脆弱性 - CVE-2006-6949 2012-06-26 15:38 2007-01-22 Show GitHub Exploit DB Packet Storm
198636 5 警告 FreeWebshop - FreeWebshop の index.php における重要な情報を取得される脆弱性 - CVE-2006-6941 2012-06-26 15:38 2007-01-18 Show GitHub Exploit DB Packet Storm
198637 4.6 警告 GNU Project - GNU ed における任意のファイルを上書きされる脆弱性 - CVE-2006-6939 2012-06-26 15:38 2007-01-16 Show GitHub Exploit DB Packet Storm
198638 7.8 危険 EFS Software - Easy Chat Server における特定のファイルをダウンロードされる脆弱性 - CVE-2006-6933 2012-06-26 15:38 2007-01-16 Show GitHub Exploit DB Packet Storm
198639 7.5 危険 ga soft - Rapid Classified の viewad.asp における SQL インジェクションの脆弱性 - CVE-2006-6930 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
198640 6.8 警告 ga soft - Rapid Classified におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6929 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 - - - Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution. New - CVE-2025-22949 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
242 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the configuracao_doacao.php endpoint of the WeGIA application. This vulnerab… New CWE-79
Cross-site Scripting 		CVE-2025-22600 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
243 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows at… New CWE-79
Cross-site Scripting 		CVE-2025-22599 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
244 - - - WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the cadastrarSocio.php endpoint of the WeGIA application. This vulnerability al… New CWE-79
Cross-site Scripting 		CVE-2025-22598 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
245 - - - WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerabilit… New CWE-79
Cross-site Scripting 		CVE-2025-22597 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
246 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the modulos_visiveis.php endpoint of the WeGIA application. This vulnerabili… New CWE-79
Cross-site Scripting 		CVE-2025-22596 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
247 - - - Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execut… New CWE-22
CWE-94
CWE-434
Path Traversal
Code Injection
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22152 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
248 - - - DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause t… New CWE-289
 Authentication Bypass by Alternate Name 		CVE-2024-56511 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
249 - - - Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions. New - CVE-2024-50807 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
250 - - - An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. New - CVE-2024-46210 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm