Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199271 6.8 警告 deskpro - DeskPRO の newticket.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-6159 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
199272 6.8 警告 inverseflow
ace helpdesk
pmos helpdesk		 - PMOS Help Desk におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6158 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
199273 2.1 注意 cryptocard - CRYPTOCard CRYPTO-Server における資格情報を取得される脆弱性 - CVE-2006-6145 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
199274 4.9 警告 アップル - Apple Mac OS X AppleTalk におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6130 2012-06-26 15:37 2006-11-27 Show GitHub Exploit DB Packet Storm
199275 4.6 警告 アップル - Apple Mac OS X の fatfile_getarch2 における整数オーバーフローの脆弱性 - CVE-2006-6129 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
199276 2.1 注意 アップル - Apple Mac OS X におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6126 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
199277 6.8 警告 biba software - SeleniumServer Web Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6124 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
199278 7.5 危険 creascripts - CreaScripts Creadirectory の search.asp における SQL インジェクションの脆弱性 - CVE-2006-6083 2012-06-26 15:37 2006-11-24 Show GitHub Exploit DB Packet Storm
199279 2.6 注意 Coppermine Photo Gallery - CPG における任意の変数を設定される脆弱性 - CVE-2006-6123 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
199280 9.3 危険 日本エイサー - Acer Notebook の LunchApp.APlunch ActiveX コントロールにおける任意のコマンドを実行される脆弱性 - CVE-2006-6121 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
681 - - - An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /monitor/s_normalizedtrans.php. New - CVE-2023-42235 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
682 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function. New - CVE-2023-42234 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
683 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function. New - CVE-2023-42232 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
684 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function. New - CVE-2023-42231 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
685 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service. New - CVE-2023-42229 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
686 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" admi… New - CVE-2023-42228 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
687 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function. New - CVE-2023-42227 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
688 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function. New - CVE-2023-42226 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
689 - - - Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function. New - CVE-2023-42225 2025-01-14 07:15 2025-01-14 Show GitHub Exploit DB Packet Storm
690 - - - MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit. Update - CVE-2024-54997 2025-01-14 07:15 2025-01-11 Show GitHub Exploit DB Packet Storm