Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200961 9.3 危険 ESET - ESET NOD32 Antivirus の OLE2 パーサーにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2006-6676 2012-06-26 15:38 2006-12-20 Show GitHub Exploit DB Packet Storm
200962 6.8 警告 astonsoft - Astonsoft DeepBurner におけるバッファオーバーフローの脆弱性 - CVE-2006-6665 2012-06-26 15:38 2006-12-20 Show GitHub Exploit DB Packet Storm
200963 6.8 警告 Drupal - Drupal 用の MySite モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6647 2012-06-26 15:38 2006-12-18 Show GitHub Exploit DB Packet Storm
200964 6.8 警告 Drupal - Drupal Project Issue Tracking および Drupal Project におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6646 2012-06-26 15:38 2006-12-18 Show GitHub Exploit DB Packet Storm
200965 5 警告 fightersoft multimedia - Fightersoft Multimedia Star FTP サーバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6643 2012-06-26 15:38 2006-12-19 Show GitHub Exploit DB Packet Storm
200966 7.5 危険 contra haber sistemi - Contra Haber Sistemi の haber.asp における SQL インジェクションの脆弱性 - CVE-2006-6642 2012-06-26 15:38 2006-12-19 Show GitHub Exploit DB Packet Storm
200967 7.5 危険 etrust
cleverpath
Arcserve
unicenter
CA Technologies
- BrightStor Portal などで使用される CA CleverPath Portal における異なる Portal サーバのユーザのセッションおよび資格情報を継承される脆弱性 - CVE-2006-6641 2012-06-26 15:38 2006-12-19 Show GitHub Exploit DB Packet Storm
200968 4.6 警告 chetcpasswd - chetcpasswd における権限を取得される脆弱性 - CVE-2006-6639 2012-06-26 15:38 2006-12-19 Show GitHub Exploit DB Packet Storm
200969 6.8 警告 genepi - Genepi の genepi.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6632 2012-06-26 15:38 2006-12-18 Show GitHub Exploit DB Packet Storm
200970 7.2 危険 シマンテック - Sygate Personal Firewall における実行中の製品コントロールを回避される脆弱性 - CVE-2006-6623 2012-06-26 15:38 2006-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1431 8.0 HIGH
Network
- - IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload m… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-25034 2025-01-25 01:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1432 6.5 MEDIUM
Network
- - The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'download_image_via_ai' and 'generate_image… CWE-862
 Missing Authorization
CVE-2024-13698 2025-01-25 01:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1433 - - - In the Linux kernel, the following vulnerability has been resolved: ovl: support encoding fid from inode with no alias Dmitry Safonov reported that a WARN_ON() assertion can be trigered by userspac… - CVE-2025-21654 2025-01-25 01:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1434 - - - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Starting in version 4.0.0-beta.18 and prior to 4.0.0-beta.253, a vulnerability in the execution of … CWE-78
OS Command 
CVE-2025-22605 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1435 5.3 MEDIUM
Network
- - A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP Header Handler. The manipulation of the… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2025-0697 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1436 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Win 98SE Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacte… - CVE-2024-9499 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1437 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted inst… - CVE-2024-9498 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1438 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted in… - CVE-2024-9497 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1439 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted … - CVE-2024-9496 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1440 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted i… - CVE-2024-9495 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm