Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208891 6.5 警告 Absolut Engine - Absolut Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9435 2015-01-7 19:12 2014-12-30 Show GitHub Exploit DB Packet Storm
208892 3.5 注意 Absolut Engine - Absolut Engine の administrative バックエンドの admin/managerrelated.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9434 2015-01-7 19:09 2014-12-30 Show GitHub Exploit DB Packet Storm
208893 4 警告 Vtiger - Vtiger CRM の kcfinder/browse.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-1222 2015-01-7 17:50 2014-03-11 Show GitHub Exploit DB Packet Storm
208894 6.2 警告 (複数のベンダ) - 複数の UEFI システムにおいて EFI S3 Resume Boot Path で使われる boot script が適切に保護されていない問題 - CVE-2014-8274 2015-01-7 17:05 2015-01-5 Show GitHub Exploit DB Packet Storm
208895 6.2 警告 (複数のベンダ) - UEFI EDK1 にバッファオーバーフローの脆弱性 - CVE-2014-8271 2015-01-7 17:04 2015-01-5 Show GitHub Exploit DB Packet Storm
208896 6 警告 (複数のベンダ) - Intel BIOS ロッキングメカニズムに競合状態の脆弱性 CWE-362
競合状態
CVE-2014-8273 2015-01-7 16:46 2015-01-5 Show GitHub Exploit DB Packet Storm
208897 6.8 警告 Zaunz GmbH - CosmoShop の cgi-bin/admin/setup_edit.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5306 2015-01-7 16:23 2011-03-10 Show GitHub Exploit DB Packet Storm
208898 4.3 警告 Zaunz GmbH - CosmoShop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5305 2015-01-7 16:23 2011-03-10 Show GitHub Exploit DB Packet Storm
208899 6.8 警告 poMMo - poMMo Aardvark の admin/setup/config/users.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5300 2015-01-7 15:57 2011-05-10 Show GitHub Exploit DB Packet Storm
208900 4.3 警告 poMMo - poMMo Aardvark におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5299 2015-01-7 15:56 2011-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251981 6.5 MEDIUM
Adjacent
- - An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an unauthenticated and lo… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2024-47503 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251982 7.5 HIGH
Network
- - An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2024-47502 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251983 5.5 MEDIUM
Local
- - A NULL Pointer Dereference vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C allows a locally authentica… CWE-476
 NULL Pointer Dereference
CVE-2024-47501 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251984 7.5 HIGH
Network
- - An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based a… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2024-47499 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251985 7.8 HIGH
Local
- - A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33582 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251986 7.8 HIGH
Local
- - A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33581 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251987 7.8 HIGH
Local
- - A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33580 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251988 7.8 HIGH
Local
- - A DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33579 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251989 7.8 HIGH
Local
- - A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33578 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251990 - - - DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3. CWE-79
Cross-site Scripting
CVE-2024-47875 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm