Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201421 4.3 警告 eyeOS Project - eyeOS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5071 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201422 5.1 警告 facestones - faceStones Personal の fsl2/objects/fs_form_links.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5070 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201423 7.5 危険 brudaswen - Brudaswen BrudaNews の admin/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5068 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201424 5.1 警告 danphpsupport - DanPHPSupport におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5066 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201425 5.1 警告 BirdBlog - BirdBlog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5064 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201426 7.5 危険 advanced-clan-script - AVC の mcf.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5061 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201427 7.5 危険 Activision Publishing - Call of Duty におけるバッファオーバーフローの脆弱性 - CVE-2006-5058 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201428 7.5 危険 forum one - syntaxCMS の admin/testing/tests/0004_init_urls.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5055 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201429 7.5 危険 fiwin - FiWin SS28S WiFi VoIP SIP/Skype Phone における管理者のアクセス権を取得される脆弱性 - CVE-2006-5038 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
201430 5 警告 Cake Software Foundation - Cake Software Foundation CakePHP の app/Webroot/js/vendors.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5031 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 - - - In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute syzbot found that TCA_FLOW_RSHIFT attribute was not validated. Right shit… - CVE-2025-21653 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1292 - - - In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs … - CVE-2025-21646 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1293 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' str… - CVE-2025-21640 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1294 8.8 HIGH
Network 		jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser. CWE-89
SQL Injection 		CVE-2024-57769 2025-01-24 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
1295 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rto_min/max: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21639 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1296 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21638 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1297 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure … - CVE-2025-21637 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1298 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'n… - CVE-2025-21636 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1299 - - - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-… - CVE-2025-21631 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1300 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in basteln3rk Save & Import Image from URL allows Reflected XSS. This issue affects Save & Import Im… CWE-79
Cross-site Scripting 		CVE-2025-23960 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm