Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208891 6.5 警告 Absolut Engine - Absolut Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-9435 2015-01-7 19:12 2014-12-30 Show GitHub Exploit DB Packet Storm
208892 3.5 注意 Absolut Engine - Absolut Engine の administrative バックエンドの admin/managerrelated.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9434 2015-01-7 19:09 2014-12-30 Show GitHub Exploit DB Packet Storm
208893 4 警告 Vtiger - Vtiger CRM の kcfinder/browse.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1222 2015-01-7 17:50 2014-03-11 Show GitHub Exploit DB Packet Storm
208894 6.2 警告 （複数のベンダ） - 複数の UEFI システムにおいて EFI S3 Resume Boot Path で使われる boot script が適切に保護されていない問題 - CVE-2014-8274 2015-01-7 17:05 2015-01-5 Show GitHub Exploit DB Packet Storm
208895 6.2 警告 （複数のベンダ） - UEFI EDK1 にバッファオーバーフローの脆弱性 - CVE-2014-8271 2015-01-7 17:04 2015-01-5 Show GitHub Exploit DB Packet Storm
208896 6 警告 （複数のベンダ） - Intel BIOS ロッキングメカニズムに競合状態の脆弱性 CWE-362
競合状態 		CVE-2014-8273 2015-01-7 16:46 2015-01-5 Show GitHub Exploit DB Packet Storm
208897 6.8 警告 Zaunz GmbH - CosmoShop の cgi-bin/admin/setup_edit.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5306 2015-01-7 16:23 2011-03-10 Show GitHub Exploit DB Packet Storm
208898 4.3 警告 Zaunz GmbH - CosmoShop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5305 2015-01-7 16:23 2011-03-10 Show GitHub Exploit DB Packet Storm
208899 6.8 警告 poMMo - poMMo Aardvark の admin/setup/config/users.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5300 2015-01-7 15:57 2011-05-10 Show GitHub Exploit DB Packet Storm
208900 4.3 警告 poMMo - poMMo Aardvark におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5299 2015-01-7 15:56 2011-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251661 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hid_report_raw_event Syzbot reported shift-out-of-bounds in hid_report_raw_event. microsof… NVD-CWE-Other
CVE-2022-48978 2024-10-26 03:46 2024-10-22 Show GitHub Exploit DB Packet Storm
251662 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array index out of bound error in DCN32 DML [Why&How] LinkCapacitySupport array is indexed with the number o… CWE-129
 Improper Validation of Array Index 		CVE-2022-48979 2024-10-26 03:40 2024-10-22 Show GitHub Exploit DB Packet Storm
251663 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() The SJA1105 family has 45 L2 policing table entries (… CWE-787
 Out-of-bounds Write 		CVE-2022-48980 2024-10-26 03:36 2024-10-22 Show GitHub Exploit DB Packet Storm
251664 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove errant put in error path drm_gem_shmem_mmap() doesn't own this reference, resulting in the GEM object ge… CWE-416
 Use After Free 		CVE-2022-48981 2024-10-26 03:33 2024-10-22 Show GitHub Exploit DB Packet Storm
251665 8.1 HIGH
Network 		microsoft windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_10_1607
windows_server_2019
windows… 		Windows MSHTML Platform Spoofing Vulnerability NVD-CWE-noinfo
CVE-2024-43573 2024-10-26 03:17 2024-10-9 Show GitHub Exploit DB Packet Storm
251666 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_10_1607
windows… 		Microsoft Management Console Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-43572 2024-10-26 03:17 2024-10-9 Show GitHub Exploit DB Packet Storm
251667 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause the suspend notifier to be regis… NVD-CWE-noinfo
CVE-2022-48982 2024-10-26 03:12 2024-10-22 Show GitHub Exploit DB Packet Storm
251668 - - - In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution … - CVE-2024-44098 2024-10-26 02:35 2024-10-25 Show GitHub Exploit DB Packet Storm
251669 - - - Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them t… - CVE-2023-48082 2024-10-26 02:15 2024-10-15 Show GitHub Exploit DB Packet Storm
251670 8.1 HIGH
Network 		google chrome Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) NVD-CWE-noinfo
CVE-2024-10229 2024-10-26 02:04 2024-10-23 Show GitHub Exploit DB Packet Storm