Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 17, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199421 7.5 危険 alientrap - Nexuiz の clientcommands における詳細不明な脆弱性 - CVE-2006-6610 2012-06-26 15:38 2006-12-17 Show GitHub Exploit DB Packet Storm
199422 5 警告 alientrap - Nexuiz におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6609 2012-06-26 15:38 2006-12-17 Show GitHub Exploit DB Packet Storm
199423 7.5 危険 clarens - Clarens jclarens における SQL インジェクションの脆弱性 - CVE-2006-6606 2012-06-26 15:38 2006-12-17 Show GitHub Exploit DB Packet Storm
199424 7.5 危険 exlor - EXlor の fonctions/template.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6591 2012-06-26 15:38 2006-12-15 Show GitHub Exploit DB Packet Storm
199425 6.8 警告 Apache Software Foundation - Apache OFBiz および Opentaps の ecommerce/control/keywordsearch におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6589 2012-06-26 15:38 2006-12-15 Show GitHub Exploit DB Packet Storm
199426 7.5 危険 Apache Software Foundation - Apache OFBiz の フォーラム実装におけるコンテンツを改ざんされる脆弱性 - CVE-2006-6588 2012-06-26 15:38 2006-12-15 Show GitHub Exploit DB Packet Storm
199427 6.8 警告 Apache Software Foundation - Apache OFBiz の ecommerce コンポーネントにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6587 2012-06-26 15:38 2006-12-15 Show GitHub Exploit DB Packet Storm
199428 7.5 危険 brian drawert - Brian Drawert yaplap の ldap.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6575 2012-06-26 15:38 2006-12-15 Show GitHub Exploit DB Packet Storm
199429 6 警告 シトリックス・システムズ - Citrix Access Gateway Advanced Edition および Citrix Access Gateway Advanced Edition with AAC におけるデータへのアクセス権を取得される脆弱性 - CVE-2006-6573 2012-06-26 15:38 2006-11-4 Show GitHub Exploit DB Packet Storm
199430 6.5 警告 シトリックス・システムズ - Citrix AAC Option および Access Gateway with Advanced Access Control におけるアクセスポリシーを回避される脆弱性 - CVE-2006-6572 2012-06-26 15:38 2006-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 17, 2025, 5:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 - - - An issue in the exp_copy component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New - CVE-2024-57634 2025-01-15 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
622 - - - An issue in the exps_bind_column component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New - CVE-2024-57633 2025-01-15 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
623 - - - An issue in the is_column_unique component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New - CVE-2024-57632 2025-01-15 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
624 - - - Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users Update - CVE-2024-33299 2025-01-15 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
625 - - - Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function Update - CVE-2024-33297 2025-01-15 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
626 - - - Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function. Update - CVE-2024-54910 2025-01-15 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
627 - - - TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function. Update - CVE-2024-57212 2025-01-15 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
628 - - - Incorrect Authorization vulnerability in Drupal OhDear Integration allows Forceful Browsing.This issue affects OhDear Integration: from 0.0.0 before 2.0.4. Update - CVE-2024-13290 2025-01-15 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
629 9.0 CRITICAL
Network 		ivanti connect_secure
policy_secure
neurons_for_zero-trust_access 		A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remo… Update CWE-787
 Out-of-bounds Write 		CVE-2025-0282 2025-01-15 00:59 2025-01-9 Show GitHub Exploit DB Packet Storm
630 7.0 HIGH
Local 		ivanti connect_secure
neurons_for_zero-trust_access
policy_secure 		A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a loca… Update CWE-787
 Out-of-bounds Write 		CVE-2025-0283 2025-01-15 00:58 2025-01-9 Show GitHub Exploit DB Packet Storm