Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201241 6.8 警告 ac4p - ac4p Mobile におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5770 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201242 4.3 警告 fixpunkt gmbh - admin.tool CMS 3 におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5769 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201243 7.5 危険 cyberfolio - Cyberfolio における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5768 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201244 6.8 警告 drake team - Drake CMS の includes/xhtml.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5767 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201245 7.5 危険 article system - Article System の volume.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5766 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201246 7.5 危険 article script - Article Script の rss.php における SQL インジェクションの脆弱性 - CVE-2006-5765 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201247 7.5 危険 free php scripts - Free File Hosting の contact.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5764 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201248 5.1 警告 free php scripts - Free File Hosting における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5763 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201249 5.1 警告 free php scripts - Free File Hosting の forgot_pass.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5762 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
201250 6.4 警告 airmagnet - AirMagnet Enterprise のコンソールにおけるネットワークトラフィックを読み取られる脆弱性 - CVE-2006-5746 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1881 - - - The latest version of utils-extend (1.0.8) is vulnerable to Prototype Pollution through the entry function(s) lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or… - CVE-2024-57077 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1882 - - - A prototype pollution in the lib.post function of ajax-request v1.2.3 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57076 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1883 - - - A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57075 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1884 - - - A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57074 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1885 - - - When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This fla… - CVE-2025-0167 2025-02-7 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1886 - - - An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters. - CVE-2024-48445 2025-02-7 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1887 - - - The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific… - CVE-2024-13723 2025-02-7 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1888 - - - The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once… - CVE-2024-13722 2025-02-7 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1889 - - - DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. - CVE-2024-55416 2025-02-7 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1890 - - - DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. - CVE-2024-55415 2025-02-7 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm