Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
851 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. W15E ファームウェア Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4121 2025-01-20 11:23 2024-04-24 Show GitHub Exploit DB Packet Storm
852 4.3 警告
Network
DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-4586 2025-01-20 11:23 2024-05-7 Show GitHub Exploit DB Packet Storm
853 5.4 警告
Network
Leap13 Premium Addons for Elementor Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-4379 2025-01-20 11:23 2024-05-31 Show GitHub Exploit DB Packet Storm
854 4.3 警告
Network
DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-4592 2025-01-20 11:23 2024-05-7 Show GitHub Exploit DB Packet Storm
855 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. W15E ファームウェア Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4122 2025-01-20 11:23 2024-04-24 Show GitHub Exploit DB Packet Storm
856 5.4 警告
Network
WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-4449 2025-01-20 11:23 2024-05-14 Show GitHub Exploit DB Packet Storm
857 5.4 警告
Network
Jegtheme Jeg Elementor Kit Jegtheme の WordPress 用 Jeg Elementor Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-87
CVE-2024-3162 2025-01-20 11:22 2024-04-3 Show GitHub Exploit DB Packet Storm
858 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. fh1205 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の fh1205 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-3006 2025-01-20 11:22 2024-03-27 Show GitHub Exploit DB Packet Storm
859 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. fh1205 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の fh1205 ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2024-3009 2025-01-20 11:22 2024-03-28 Show GitHub Exploit DB Packet Storm
860 5.4 警告
Network
Royal Elementor Addons Royal Elementor Addons and Templates Royal Elementor Addons の WordPress 用 Royal Elementor Addons and Templates におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3887 2025-01-20 11:22 2024-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277231 - freebsd
openbsd
freebsd
openbsd
The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to /dev/crypto. NVD-CWE-Other
CVE-2006-5550 2008-09-6 06:12 2006-10-27 Show GitHub Exploit DB Packet Storm
277232 - datawizard ftpxq FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown… NVD-CWE-Other
CVE-2006-5569 2008-09-6 06:12 2006-10-28 Show GitHub Exploit DB Packet Storm
277233 - snitz_communications snitz_forums_2000 SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the RC parameter. NOTE: the provenance of this information is un… NVD-CWE-Other
CVE-2006-5603 2008-09-6 06:12 2006-10-31 Show GitHub Exploit DB Packet Storm
277234 - fully_modded_phpbb fully_modded_phpbb PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP cod… NVD-CWE-Other
CVE-2006-5610 2008-09-6 06:12 2006-10-31 Show GitHub Exploit DB Packet Storm
277235 - ig_shop ig_shop Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006… NVD-CWE-Other
CVE-2006-5632 2008-09-6 06:12 2006-11-1 Show GitHub Exploit DB Packet Storm
277236 - ubuntu ubuntu_linux Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list functions to create pro… NVD-CWE-Other
CVE-2006-5648 2008-09-6 06:12 2006-12-14 Show GitHub Exploit DB Packet Storm
277237 - ubuntu ubuntu_linux Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (kernel panic) via unspe… NVD-CWE-Other
CVE-2006-5649 2008-09-6 06:12 2006-12-14 Show GitHub Exploit DB Packet Storm
277238 - alt-n mdaemon Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via unspecified vectors res… NVD-CWE-Other
CVE-2006-5708 2008-09-6 06:12 2006-11-4 Show GitHub Exploit DB Packet Storm
277239 - alt-n mdaemon This vulnerability is addressed in the following product release: Alt-N Technologies, MDaemon, 9.50 NVD-CWE-Other
CVE-2006-5708 2008-09-6 06:12 2006-11-4 Show GitHub Exploit DB Packet Storm
277240 - punbb punbb Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NVD-CWE-Other
CVE-2006-5738 2008-09-6 06:12 2006-11-7 Show GitHub Exploit DB Packet Storm