Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208761	2.1	注意	レッドハット	-	libvirt の storage/storage_driver.c の storageVolUpload 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2014-8135	2015-01-14 17:21	2014-12-3	Show	GitHub Exploit DB Packet Storm

208762	7.5	危険	Installatron	-	Installatron GQ File Manager の incl/create.inc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-9445	2015-01-14 17:20	2014-12-20	Show	GitHub Exploit DB Packet Storm

208763	7.1	危険	General Electric Company Catapult Software	-	GE Intelligent Platforms 製品で使用される Catapult および GE Intelligent Platforms Proficy の DNP3 I/O ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-2811	2015-01-14 17:18	2013-10-2	Show	GitHub Exploit DB Packet Storm

208764	9	危険	IBM	-	IBM PureApplication System および Workload Deployer の file-upload 機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-6158	2015-01-14 14:51	2014-12-15	Show	GitHub Exploit DB Packet Storm

208765	3.5	注意	IBM	-	IBM Curam Social Program Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3096	2015-01-14 14:47	2014-04-29	Show	GitHub Exploit DB Packet Storm

208766	6.8	警告	TP-LINK Technologies	-	TP-Link TL-WR840N ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-9510	2015-01-14 14:36	2014-11-20	Show	GitHub Exploit DB Packet Storm

208767	10	危険	Schneider Electric	-	Schneider Electric Wonderware InTouch Access Anywhere Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-9190	2015-01-14 13:56	2014-12-2	Show	GitHub Exploit DB Packet Storm

208768	5	警告	Wireshark	-	Wireshark の WCCP ディセクタの epan/dissectors/packet-wccp.c 内の dissect_wccp2r1_address_table_info 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-0560	2015-01-14 12:11	2015-01-7	Show	GitHub Exploit DB Packet Storm

208769	5	警告	Wireshark	-	Wireshark の WCCP ディセクタの epan/dissectors/packet-wccp.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-0559	2015-01-14 12:10	2015-01-7	Show	GitHub Exploit DB Packet Storm

208770	4.3	警告	MantisBT Group	-	MantisBT の string_insert_href 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-9272	2015-01-14 11:24	2014-12-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252051	6.1	MEDIUM Network	ujangrohidin	localserver	Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through …	CWE-79 Cross-site Scripting	CVE-2024-10289	2024-10-24 13:07	2024-10-23	Show	GitHub Exploit DB Packet Storm

252052	6.1	MEDIUM Network	ujangrohidin	localserver	Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through …	CWE-79 Cross-site Scripting	CVE-2024-10288	2024-10-24 13:07	2024-10-23	Show	GitHub Exploit DB Packet Storm

252053	6.1	MEDIUM Network	ujangrohidin	localserver	Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through …	CWE-79 Cross-site Scripting	CVE-2024-10287	2024-10-24 13:07	2024-10-23	Show	GitHub Exploit DB Packet Storm

252054	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in …	CWE-476 NULL Pointer Dereference	CVE-2023-52918	2024-10-24 12:55	2024-10-22	Show	GitHub Exploit DB Packet Storm

252055	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (call…	CWE-476 NULL Pointer Dereference	CVE-2023-52919	2024-10-24 12:53	2024-10-22	Show	GitHub Exploit DB Packet Storm

252056	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of m_ca…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2022-49024	2024-10-24 12:50	2024-10-22	Show	GitHub Exploit DB Packet Storm

252057	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix buffer overflow in elem comparison For vendor elements, the code here assumes that 5 octets are present witho…	CWE-120 Classic Buffer Overflow	CVE-2022-49023	2024-10-24 12:50	2024-10-22	Show	GitHub Exploit DB Packet Storm

252058	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e…	CWE-416 Use After Free	CVE-2022-49026	2024-10-24 12:49	2024-10-22	Show	GitHub Exploit DB Packet Storm

252059	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free when reverting termination table When having multiple dests with termination tables and second one …	CWE-416 Use After Free	CVE-2022-49025	2024-10-24 12:49	2024-10-22	Show	GitHub Exploit DB Packet Storm

252060	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavf_init_module() The iavf_init_module() won't destroy workqueue when pci_register_driver() failed. …	NVD-CWE-Other	CVE-2022-49027	2024-10-24 12:48	2024-10-22	Show	GitHub Exploit DB Packet Storm