Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200131 7.5 危険 azucar cms - Azucar CMS の admin/index_sitios.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-6720 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200132 5 警告 GNU Project - FSF GNU wget の ftp-basic.c の ftp_syst 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6719 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200133 7.5 危険 アライドテレシス - Allied Telesis AT-9000/24 Ethernet スイッチにおける不正のアクションを実行される脆弱性 - CVE-2006-6718 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200134 7.5 危険 アライドテレシス - Allied Telesis AT-9000/24 Ethernet スイッチにおける想定外のロケーションから攻撃を実行される脆弱性 - CVE-2006-6717 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200135 7.5 危険 eric guillaume - Eric GUILLAUME uploader&downloader における SQL インジェクションの脆弱性 - CVE-2006-6716 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200136 6.8 警告 atmail pty ltd - @Mail の Webadmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6704 2012-06-26 15:38 2006-12-22 Show GitHub Exploit DB Packet Storm
200137 6.8 警告 atmail pty ltd - Atmail の Global.pm におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6702 2012-06-26 15:38 2006-12-22 Show GitHub Exploit DB Packet Storm
200138 7.5 危険 atmail pty ltd - Atmail WebMail の util.pl におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2006-6701 2012-06-26 15:38 2006-12-22 Show GitHub Exploit DB Packet Storm
200139 6.8 警告 calacode - @Mail WebMail におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6700 2012-06-26 15:38 2006-12-22 Show GitHub Exploit DB Packet Storm
200140 6.8 警告 carsen klock - Carsen Klock TextSend の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6695 2012-06-26 15:38 2006-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 - - - Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedEndTi… - CVE-2024-57703 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
802 - - - librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters (Replace $DEVICE_ID with your specific $DEVICE_ID value):`/device… CWE-79
Cross-site Scripting 		CVE-2024-56144 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
803 - - - An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted web requests. - CVE-2024-53553 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
804 - - - Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions. - CVE-2024-40514 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
805 - - - An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function. - CVE-2024-40513 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
806 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly published by the other party. - CVE-2023-22139 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
807 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly published by the other party. - CVE-2019-3309 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
808 - - - A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows an attacker to elevate their privileges via executing a specially crafted executable. - CVE-2024-55511 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
809 - - - A JNDI injection issue was discovered in Cloudera JDBC Connector for Hive before 2.6.26 and JDBC Connector for Impala before 2.6.35. Attackers can inject malicious parameters into the JDBC URL, trigg… - CVE-2024-54660 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
810 - - - An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails. - CVE-2024-48460 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm