Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242481 10 危険 bitflux - Bitflux Upload Progress Meter の uploadprogress_php_rfc1867_file 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-6361 2012-06-26 15:38 2006-12-7 Show GitHub Exploit DB Packet Storm
242482 10 危険 duware - DuWare DuClassmate の default.asp における SQL インジェクションの脆弱性 - CVE-2006-6355 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242483 7.5 危険 duware - DuWare DuNews の detail.asp における SQL インジェクションの脆弱性 - CVE-2006-6354 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242484 5 警告 アップル - Mac OS X の BOMArchiveHelper におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6353 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242485 5 警告 frisk software - FRISK Software F-Prot Antivirus におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6352 2012-06-26 15:38 2006-12-1 Show GitHub Exploit DB Packet Storm
242486 6.8 警告 deV!L'z Clanportal - DZCP の sites/index.php における SQL インジェクションの脆弱性 - CVE-2006-6339 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242487 5 警告 deV!L'z Clanportal - DZCP の upload/index.php における任意の .php ファイルをアップロードおよび実行される脆弱性 - CVE-2006-6338 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242488 7.5 危険 ASP indir - Aspee Ziyaretci Defteri の giris.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-6337 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242489 10 危険 ライブドア - Eudora WorldMail の MAILMA.exe におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-6336 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
242490 6.8 警告 シトリックス・システムズ - Citrix Presentation Server Client の SendChannelData 関数におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-6334 2012-06-26 15:38 2006-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251221 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned val… CWE-476
 NULL Pointer Dereference 		CVE-2024-50070 2024-10-31 01:59 2024-10-29 Show GitHub Exploit DB Packet Storm
251222 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned val… CWE-476
 NULL Pointer Dereference 		CVE-2024-50069 2024-10-31 01:58 2024-10-29 Show GitHub Exploit DB Packet Storm
251223 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() The sysfs_target->regions allocated in damon_sysf… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-50068 2024-10-31 01:57 2024-10-29 Show GitHub Exploit DB Packet Storm
251224 9.8 CRITICAL
Network 		codezips sales_management_system A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addcustcom.php. The manipu… CWE-89
SQL Injection 		CVE-2024-10369 2024-10-31 01:50 2024-10-25 Show GitHub Exploit DB Packet Storm
251225 9.8 CRITICAL
Network 		codezips sales_management_system A vulnerability was found in Codezips Sales Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addstock.php. The manipulation of the argument prod… CWE-89
SQL Injection 		CVE-2024-10368 2024-10-31 01:46 2024-10-25 Show GitHub Exploit DB Packet Storm
251226 9.8 CRITICAL
Network 		codezips sales_management_system A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /addcustind.php. The manipulation of… CWE-89
SQL Injection 		CVE-2024-10370 2024-10-31 01:38 2024-10-25 Show GitHub Exploit DB Packet Storm
251227 6.1 MEDIUM
Network 		heateor sassy_social_share The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateor_sss_sharing_count' AJAX action in versions up to, and incl… CWE-79
Cross-site Scripting 		CVE-2022-4971 2024-10-31 01:37 2024-10-16 Show GitHub Exploit DB Packet Storm
251228 7.5 HIGH
Network 		apple macos A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location inf… NVD-CWE-noinfo
CVE-2024-44289 2024-10-31 01:35 2024-10-29 Show GitHub Exploit DB Packet Storm
251229 - - - A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions. - CVE-2024-44270 2024-10-31 01:35 2024-10-29 Show GitHub Exploit DB Packet Storm
251230 - - - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system. - CVE-2024-44267 2024-10-31 01:35 2024-10-29 Show GitHub Exploit DB Packet Storm