Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208851 4.3 警告 Open-Xchange - Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1679 2015-01-8 18:30 2014-01-29 Show GitHub Exploit DB Packet Storm
208852 7.5 危険 TYPO3 Association - TYPO3 のフロントエンドレンダリングコンポーネントにおける脆弱性 CWE-20
不適切な入力確認
CVE-2014-9509 2015-01-8 18:23 2014-12-9 Show GitHub Exploit DB Packet Storm
208853 4.3 警告 TYPO3 Association - TYPO3 の フロントエンドレンダリングコンポーネントにおける任意のドメインの URL に変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2014-9508 2015-01-8 18:23 2014-12-9 Show GitHub Exploit DB Packet Storm
208854 5 警告 VDG Security B.V. - VDG Security Sense におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-9452 2015-01-8 17:32 2014-10-1 Show GitHub Exploit DB Packet Storm
208855 7.5 危険 VDG Security B.V. - VDG Security Sense の DIVA Web サービス API におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9451 2015-01-8 17:29 2014-10-1 Show GitHub Exploit DB Packet Storm
208856 7.5 危険 Zabbix - Zabbix のフロントエンドの chart_bar.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9450 2015-01-8 17:10 2014-08-21 Show GitHub Exploit DB Packet Storm
208857 6.5 警告 IPCop - IPCop の cgi-bin/iptablesgui.cgi における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-7418 2015-01-8 16:53 2013-04-25 Show GitHub Exploit DB Packet Storm
208858 7.5 危険 Microweber - Microweber CMS の Category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9464 2015-01-8 16:37 2014-12-11 Show GitHub Exploit DB Packet Storm
208859 6.8 警告 Miltenovikj Manojlo - MemHT Portal におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-5320 2015-01-8 16:37 2010-11-2 Show GitHub Exploit DB Packet Storm
208860 6.8 警告 Kan-Studio - Kandidat CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-5319 2015-01-8 16:36 2010-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252161 - - - The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcore#validatetokensignature contains Middleware that can be used in conjunction with th… - CVE-2024-10125 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252162 - - - A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated atta… - CVE-2024-41714 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252163 - - - A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to i… - CVE-2024-41713 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252164 - - - A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a command injection attack, due to insufficient validation of user… - CVE-2024-41712 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252165 - - - Vilo 5 Mesh WiFi System <= 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated attackers to retrieve logs with sensitive system. - CVE-2024-40091 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252166 - - - Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak in the Boa webserver allows remote, unauthenticated attackers to leak memory addresses of uClibc and … - CVE-2024-40090 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252167 - - - A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary code by injecting shell commands into the name of the Vilo device. - CVE-2024-40089 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252168 - - - A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to enumerate the existence and length of any file in the file… - CVE-2024-40088 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252169 - - - Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions. Lack of authentication in the custom TCP service on port 5432 allows remote, unauthenticated attackers to gain administrati… - CVE-2024-40087 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm
252170 - - - A Buffer Overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary code via a pas… - CVE-2024-40086 2024-10-24 00:12 2024-10-22 Show GitHub Exploit DB Packet Storm