Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 30, 2025, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201451 7.5 危険 digiappz - Digiappz Freekot の login_verif.asp における SQL インジェクションの脆弱性 - CVE-2006-4524 2012-06-26 15:37 2006-09-1 Show GitHub Exploit DB Packet Storm
201452 5 警告 2wire inc - 複数の 2Wire 製品の Web ベースの管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4523 2012-06-26 15:37 2006-09-1 Show GitHub Exploit DB Packet Storm
201453 4.9 警告 FreeBSD - FreeBSD における整数符号化エラーの脆弱性 - CVE-2006-4516 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
201454 5.1 警告 exbb - ExBB Italia の modules/userstop/userstop.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4488 2012-06-26 15:37 2006-08-31 Show GitHub Exploit DB Packet Storm
201455 5 警告 duware - DUware DUpoll におけるユーザ名およびパスワード等の重要な情報を取得される脆弱性 - CVE-2006-4487 2012-06-26 15:37 2006-08-31 Show GitHub Exploit DB Packet Storm
201456 7.5 危険 gonafish.com - Gonafish.com LinksCaffe におけるすべての管理の権限を取得される脆弱性 - CVE-2006-4462 2012-06-26 15:37 2006-08-31 Show GitHub Exploit DB Packet Storm
201457 4.3 警告 clemens wacha - PHP iAddressBook におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4460 2012-06-26 15:37 2006-08-31 Show GitHub Exploit DB Packet Storm
201458 7.5 危険 digi international inc - AnywhereUSB/5 における整数オーバーフローの脆弱性 - CVE-2006-4459 2012-06-26 15:37 2006-09-5 Show GitHub Exploit DB Packet Storm
201459 7.5 危険 cj-design - CJ Tag Board における任意の PHP コードを実行される脆弱性 - CVE-2006-4451 2012-06-26 15:37 2006-08-29 Show GitHub Exploit DB Packet Storm
201460 6.5 警告 サイボウズ - Cybozu Garoon における SQL インジェクションの脆弱性 - CVE-2006-4444 2012-06-26 15:37 2006-08-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 30, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
961 5.4 MEDIUM
Network 		- - Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and… - CVE-2025-21544 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
962 7.8 HIGH
Local 		- - Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). Supported versions that are affected are Prior to 8.1.0. Easily exploitable vulnerability allows low p… - CVE-2025-21532 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
963 4.3 MEDIUM
Network 		- - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerab… - CVE-2025-21530 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
964 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Ea… - CVE-2025-21529 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
965 4.4 MEDIUM
Network 		- - IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitr… CWE-79
Cross-site Scripting 		CVE-2024-51457 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
966 - - - In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. Th… - CVE-2024-49734 2025-01-23 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
967 - - - Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2025-23028 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
968 7.5 HIGH
Network 		- - A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (… CWE-789
CWE-476
 Memory Allocation with Excessive Size Value
 NULL Pointer Dereference 		CVE-2025-20165 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
969 5.3 MEDIUM
Network 		- - A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected d… CWE-122
CWE-120
Heap-based Buffer Overflow
Classic Buffer Overflow 		CVE-2025-20128 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
970 4.3 MEDIUM
Network 		07fly 07flycms 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html CWE-352
 Origin Validation Error 		CVE-2024-57161 2025-01-23 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm