Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
41 9.8 緊急
Network 		Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat における信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
CWE-502
CVE-2023-51389 2025-01-17 19:41 2023-12-18 Show GitHub Exploit DB Packet Storm
42 8.5 重要
Network 		BoldGrid W3 Total Cache BoldGrid の WordPress 用 W3 Total Cache における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-12365 2025-01-17 19:41 2024-12-9 Show GitHub Exploit DB Packet Storm
43 9.8 緊急
Network 		Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CWE-288
CVE-2024-13181 2025-01-17 19:41 2025-01-14 Show GitHub Exploit DB Packet Storm
44 6.4 警告
Network 		s-sols seraphinite accelerator s-sols の WordPress 用 seraphinite accelerator におけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2024-1568 2025-01-17 19:41 2024-02-28 Show GitHub Exploit DB Packet Storm
45 7.2 重要
Network 		zestard admin side data storage for contact form 7 zestard の WordPress 用 admin side data storage for contact form 7 における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-1776 2025-01-17 19:41 2024-02-23 Show GitHub Exploit DB Packet Storm
46 8.8 重要
Network 		Progress Software Corporation telerik reporting Progress Software Corporation の telerik reporting における信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
CWE-502
CVE-2024-1856 2025-01-17 19:40 2024-03-20 Show GitHub Exploit DB Packet Storm
47 9.1 緊急
Network 		WPvivid Migration
 Backup
 Staging 		WPvivid の WordPress 用 Migration, Backup, Staging における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-1981 2025-01-17 19:40 2024-02-29 Show GitHub Exploit DB Packet Storm
48 4.8 警告
Network 		shopfiles ebook store shopfiles の WordPress 用 ebook store におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-23501 2025-01-17 19:40 2024-02-29 Show GitHub Exploit DB Packet Storm
49 6.5 警告
Network 		axiosys bento4 axiosys の bento4 における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
CWE-401
CVE-2024-24155 2025-01-17 19:40 2024-02-29 Show GitHub Exploit DB Packet Storm
50 5.4 警告
Network 		Vanderbilt redcap Vanderbilt の redcap におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-56377 2025-01-17 19:40 2024-12-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275101 - xerox workcentre_232
workcentre_238
workcentre_245
workcentre_255
workcentre_265
workcentre_275 		Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to by… NVD-CWE-Other
CVE-2006-6434 2008-09-11 05:39 2006-12-10 Show GitHub Exploit DB Packet Storm
275102 - xerox workcentre The SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 does not generate authentication failure traps, which all… NVD-CWE-Other
CVE-2006-6435 2008-09-11 05:39 2006-12-10 Show GitHub Exploit DB Packet Storm
275103 - xerox workcentre_232
workcentre_238
workcentre_245
workcentre_255
workcentre_265
workcentre_275 		Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote … NVD-CWE-Other
CVE-2006-6436 2008-09-11 05:39 2006-12-10 Show GitHub Exploit DB Packet Storm
275104 - xerox workcentre ops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows attackers to cause a denial of service (application crash and cor… NVD-CWE-Other
CVE-2006-6437 2008-09-11 05:39 2006-12-10 Show GitHub Exploit DB Packet Storm
275105 - xerox workcentre_232
workcentre_238
workcentre_245
workcentre_255
workcentre_265
workcentre_275 		Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), whi… NVD-CWE-Other
CVE-2006-6438 2008-09-11 05:39 2006-12-10 Show GitHub Exploit DB Packet Storm
275106 - xerox workcentre_232
workcentre_238
workcentre_245
workcentre_255
workcentre_265
workcentre_275 		Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain potentially sensitive i… NVD-CWE-Other
CVE-2006-6439 2008-09-11 05:39 2006-12-10 Show GitHub Exploit DB Packet Storm
275107 - xerox workcentre_232
workcentre_238
workcentre_245
workcentre_255
workcentre_265
workcentre_275 		Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternat… NVD-CWE-Other
CVE-2006-6441 2008-09-11 05:39 2006-12-10 Show GitHub Exploit DB Packet Storm
275108 - madwifi madwifi The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a con… NVD-CWE-Other
CVE-2005-4835 2008-09-11 04:54 2005-12-31 Show GitHub Exploit DB Packet Storm
275109 - spey spey Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes which could lead to compromise," a different issue than CVE-2005-4846. NVD-CWE-noinfo
CVE-2005-4847 2008-09-11 04:54 2005-12-31 Show GitHub Exploit DB Packet Storm
275110 - ocomon ocomon Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NVD-CWE-Other
CVE-2005-4663 2008-09-11 04:53 2005-12-31 Show GitHub Exploit DB Packet Storm