Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200941 5 警告 dxmsoft - XM Easy Personal FTP Server におけるフォーマットストリングの脆弱性 - CVE-2006-6750 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200942 7.5 危険 dreaxteam - Xt-News の show_news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-6747 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200943 4.3 警告 dreaxteam - Xt-News におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-6746 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200944 6.8 警告 cwm-design - cwmCounter の statistic.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-6738 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200945 6.8 警告 cwm-design - cwmVote の archive.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-6732 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200946 4 警告 bolintech - BolinTech Dream FTP Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6724 2012-06-26 15:38 2006-12-26 Show GitHub Exploit DB Packet Storm
200947 7.5 危険 azucar cms - Azucar CMS の admin/index_sitios.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-6720 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200948 5 警告 GNU Project - FSF GNU wget の ftp-basic.c の ftp_syst 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6719 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200949 7.5 危険 アライドテレシス - Allied Telesis AT-9000/24 Ethernet スイッチにおける不正のアクションを実行される脆弱性 - CVE-2006-6718 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
200950 7.5 危険 アライドテレシス - Allied Telesis AT-9000/24 Ethernet スイッチにおける想定外のロケーションから攻撃を実行される脆弱性 - CVE-2006-6717 2012-06-26 15:38 2006-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 - - - A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs o… - CVE-2025-24402 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1232 - - - Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (t… - CVE-2025-24401 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1233 - - - Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. - CVE-2025-24398 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1234 - - - A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS)… - CVE-2024-24424 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1235 - - - A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of S… - CVE-2024-24421 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1236 - - - A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a c… - CVE-2024-24420 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1237 - - - A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to c… - CVE-2023-37028 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1238 - - - Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to cra… - CVE-2023-37027 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1239 - - - OpenAirInterface CN5G AMF (oai-cn5g-amf) <= 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to… - CVE-2024-24445 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1240 - - - pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php. - CVE-2023-27113 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm