Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199251 5 警告 bluview - Bluview BMB における重要な情報を取得される脆弱性 - CVE-2006-4835 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
199252 10 危険 blojsom - David Czarnecki Blojsom の EditBlogTemplatesPlugin.java におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4830 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
199253 6.8 警告 blojsom - David Czarnecki Blojsom におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4829 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
199254 4.3 警告 emusoft - eMuSOFT emuCMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4822 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
199255 4.3 警告 Drupal - Drupal の Userreview モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4821 2012-06-26 15:37 2006-09-13 Show GitHub Exploit DB Packet Storm
199256 5.1 警告 Enlightenment - imlib2 の loader_pnm.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4809 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
199257 2.6 注意 Enlightenment - imlib2 の loader_tga.c におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4808 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
199258 2.6 注意 Enlightenment - imlib2 の loader_tga.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4807 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
199259 5.1 警告 Enlightenment - imlib2 における整数オーバーフローの脆弱性 - CVE-2006-4806 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
199260 7.5 危険 FFmpeg - ffmpeg の libavcodec におけるバッファオーバーフローの脆弱性 - CVE-2006-4800 2012-06-26 15:37 2006-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
571 - - - The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2 for Android enables any application (with no permissions) to place phone calls… - CVE-2024-53934 2025-01-9 02:15 2025-01-7 Show GitHub Exploit DB Packet Storm
572 - - - Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwri… CWE-20
CWE-434
 Improper Input Validation 
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22137 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
573 - - - Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and Enable… CWE-94
Code Injection 		CVE-2025-22136 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
574 - - - Soft Serve is a self-hostable Git server for the command line. Prior to 0.8.2 , a path traversal attack allows existing non-admin users to access and take over other user's repositories. A malicious … CWE-22
Path Traversal 		CVE-2025-22130 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
575 - - - RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows a… CWE-190
 Integer Overflow or Wraparound 		CVE-2024-55656 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
576 4.8 MEDIUM
Network 		- - A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could allow an unauthenticated, remote attacker to intercept or manipulate metrics infor… CWE-295
Improper Certificate Validation  		CVE-2025-20126 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
577 4.8 MEDIUM
Network 		- - Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks agains… CWE-79
Cross-site Scripting 		CVE-2025-20123 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
578 - - - An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL q… - CVE-2024-55517 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
579 - - - RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT… CWE-190
CWE-122
 Integer Overflow or Wraparound
Heap-based Buffer Overflow 		CVE-2024-51737 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
580 - - - RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially c… CWE-190
CWE-122
 Integer Overflow or Wraparound
Heap-based Buffer Overflow 		CVE-2024-51480 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm