Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198641 4.3 警告 Docebo - Docebo LMS の modules/credits/credits.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6857 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198642 5 警告 aidex - AIDeX Mini-WebServer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6855 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198643 7.5 危険 de marchi daniele - De Marchi Daniele QuickCam VC Linux デバイスドライバにおける任意のコードを実行される脆弱性 - CVE-2006-6854 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198644 7.5 危険 cahier de textes - Cahier de texte (CDT) の administration/index.php における不正な管理者操作を実行される脆弱性 - CVE-2006-6849 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198645 7.5 危険 aspticker - ASPTicker の admin.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-6848 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198646 7.5 危険 cybercoded - WYWO InOut Board における SQL インジェクションの脆弱性 - CVE-2006-6846 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198647 6.8 警告 CMS Made Simple - CMS Made Simple の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6845 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198648 6.8 警告 CMS Made Simple - CMS Made Simple の optional user comment モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6844 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198649 7.5 危険 codemonkeyx - phpBB2 Plus の Acronym Mod の admin/admin_acronyms.php における SQL インジェクションの脆弱性 - CVE-2006-6842 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
198650 7.5 危険 alan ward - aFAQ の faqDsp.asp における SQL インジェクションの脆弱性 - CVE-2006-6831 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 7.5 HIGH
Network 		- - The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for… CWE-22
Path Traversal 		CVE-2024-12152 2025-01-7 19:15 2025-01-7 Show GitHub Exploit DB Packet Storm
582 - - - : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1… - CVE-2024-11627 2025-01-7 18:15 2025-01-7 Show GitHub Exploit DB Packet Storm
583 - - - Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: fro… - CVE-2024-11626 2025-01-7 18:15 2025-01-7 Show GitHub Exploit DB Packet Storm
584 - - - Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, fr… - CVE-2024-11625 2025-01-7 18:15 2025-01-7 Show GitHub Exploit DB Packet Storm
585 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-56762 2025-01-7 18:15 2025-01-7 Show GitHub Exploit DB Packet Storm
586 - - - in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free. CWE-416
 Use After Free 		CVE-2024-54030 2025-01-7 17:15 2025-01-7 Show GitHub Exploit DB Packet Storm
587 - - - in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write. CWE-787
 Out-of-bounds Write 		CVE-2024-47398 2025-01-7 17:15 2025-01-7 Show GitHub Exploit DB Packet Storm
588 - - - in OpenHarmony v4.1.2 and prior versions allow a local attacker cause information leak through out-of-bounds Read. CWE-125
Out-of-bounds Read 		CVE-2024-45070 2025-01-7 17:15 2025-01-7 Show GitHub Exploit DB Packet Storm
589 6.4 MEDIUM
Network 		- - The Coupon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Coupon Code' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization … CWE-79
Cross-site Scripting 		CVE-2024-12516 2025-01-7 17:15 2025-01-7 Show GitHub Exploit DB Packet Storm
590 8.8 HIGH
Network 		- - The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all… CWE-862
 Missing Authorization 		CVE-2024-12202 2025-01-7 17:15 2025-01-7 Show GitHub Exploit DB Packet Storm