Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208961 2.1 注意 AVAST Software s.r.o. - Avast! Internet Security の aswFW.sys における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-5075 2015-01-6 14:45 2010-08-3 Show GitHub Exploit DB Packet Storm
208962 6 警告 IBM - IBM Security Identity Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-6168 2015-01-6 14:39 2014-12-16 Show GitHub Exploit DB Packet Storm
208963 2.1 注意 IBM - IBM WebSphere Service Registry and Repository におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-6160 2015-01-6 14:36 2014-12-19 Show GitHub Exploit DB Packet Storm
208964 2.1 注意 IBM - IBM Rational AppScan Source および Security AppScan Source における重要な資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-6123 2015-01-6 14:26 2014-12-16 Show GitHub Exploit DB Packet Storm
208965 7.5 危険 Redmine - Redmine 用 redmine_git_hosting プラグインの git_http_controller.rb における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2013-4663 2015-01-6 14:16 2013-08-16 Show GitHub Exploit DB Packet Storm
208966 6.8 警告 SyndeoCMS - SyndeoCMS の starnet/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1203 2015-01-6 14:08 2012-02-19 Show GitHub Exploit DB Packet Storm
208967 7.5 危険 OpenBSD - LibreSSL の d1_srtp.c 内の ssl_parse_clienthello_use_srtp_ext 関数におけるメモリ二重解放の脆弱性 CWE-Other
その他 		CVE-2014-9424 2015-01-6 14:06 2014-12-12 Show GitHub Exploit DB Packet Storm
208968 5 警告 Hillstone Software - Hillstone HS TFTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4720 2015-01-6 14:01 2011-12-2 Show GitHub Exploit DB Packet Storm
208969 4.3 警告 SiliSoftware - phpThumb のデフォルト設定におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-Other
その他 		CVE-2013-6919 2015-01-6 13:55 2013-11-30 Show GitHub Exploit DB Packet Storm
208970 5 警告 Facebook - Facebook HipHop Virtual Machine の hphp/runtime/ext/ext_hash.cpp の HashContext クラスにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-6229 2015-01-6 13:50 2014-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251821 5.5 MEDIUM
Local 		adobe acrobat Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit… CWE-125
Out-of-bounds Read 		CVE-2024-39379 2024-10-16 22:38 2024-07-31 Show GitHub Exploit DB Packet Storm
251822 6.8 MEDIUM
Network 		adobe commerce
magento 		Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could l… CWE-22
Path Traversal 		CVE-2024-39406 2024-10-16 22:37 2024-08-14 Show GitHub Exploit DB Packet Storm
251823 4.3 MEDIUM
Network 		adobe commerce
magento 		Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features a… CWE-352
 Origin Validation Error 		CVE-2024-39408 2024-10-16 22:36 2024-08-14 Show GitHub Exploit DB Packet Storm
251824 4.3 MEDIUM
Network 		adobe commerce
magento 		Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features a… CWE-352
 Origin Validation Error 		CVE-2024-39409 2024-10-16 22:35 2024-08-14 Show GitHub Exploit DB Packet Storm
251825 4.3 MEDIUM
Network 		adobe commerce
magento 		Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features a… CWE-352
 Origin Validation Error 		CVE-2024-39410 2024-10-16 22:34 2024-08-14 Show GitHub Exploit DB Packet Storm
251826 5.4 MEDIUM
Network 		flatpress flatpress FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the conte… CWE-79
Cross-site Scripting 		CVE-2024-33209 2024-10-16 22:33 2024-10-3 Show GitHub Exploit DB Packet Storm
251827 4.3 MEDIUM
Network 		adobe commerce
magento 		Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged att… NVD-CWE-noinfo
CVE-2024-39412 2024-10-16 22:33 2024-08-14 Show GitHub Exploit DB Packet Storm
251828 5.5 MEDIUM
Local 		adobe after_effects After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to… CWE-125
Out-of-bounds Read 		CVE-2024-41867 2024-10-16 22:31 2024-09-13 Show GitHub Exploit DB Packet Storm
251829 7.2 HIGH
Network 		ivanti endpoint_manager_cloud_services_appliance Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions. CWE-22
Path Traversal 		CVE-2024-9381 2024-10-16 22:30 2024-10-9 Show GitHub Exploit DB Packet Storm
251830 7.5 HIGH
Network 		ivanti avalanche Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information CWE-22
Path Traversal 		CVE-2024-47011 2024-10-16 22:28 2024-10-9 Show GitHub Exploit DB Packet Storm