Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200931 7.5 危険 chatwm - chatwm の SelGruFra.asp における SQL インジェクションの脆弱性 - CVE-2006-6791 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
200932 6.8 警告 future internet - Future Internet の index.cfm におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6777 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
200933 7.5 危険 future internet - Future Internet における SQL インジェクションの脆弱性 - CVE-2006-6776 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
200934 3.5 注意 acftp - acFTP におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6775 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
200935 6.8 警告 ciberia - Ciberia Content Federator の members/maquetacion_member.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6774 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
200936 7.5 危険 fishyshoop - Fishyshoop の pages/register/register.php における任意の管理者ユーザを作成される脆弱性 - CVE-2006-6773 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
200937 7.5 危険 cwm-design - cwmExplorer における SQL インジェクションの脆弱性 - CVE-2006-6766 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200938 7.8 危険 cwm-design - cwmExplorer の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6757 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200939 7.5 危険 ftprush - FTPRush におけるバッファオーバーフローの脆弱性 - CVE-2006-6752 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200940 5 警告 dxmsoft - XM Easy Personal FTP Server におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2006-6751 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1971 - - - The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against h… - CVE-2024-13097 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1972 - - - The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored … - CVE-2024-13096 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1973 - - - The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow user… - CVE-2024-12768 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1974 - - - The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only mean… - CVE-2025-0938 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1975 - - - reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as `penetration_tester` or `auditor` t… CWE-284
Improper Access Control 		CVE-2025-24968 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1976 - - - reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. An attacker can exp… CWE-79
Cross-site Scripting 		CVE-2025-24967 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1977 - - - reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary … CWE-79
Cross-site Scripting 		CVE-2025-24966 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1978 - - - Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site W… CWE-1385
 Missing Origin Validation in WebSockets 		CVE-2025-24964 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1979 - - - Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the n… CWE-22
Path Traversal 		CVE-2025-24963 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1980 - - - AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving … CWE-120
Classic Buffer Overflow 		CVE-2025-0960 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm