Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
210671 6 警告 OpenStack - OpenStack Identity および Juno におけるアクセス権を取得される脆弱性 CWE-310
暗号の問題
CVE-2014-3520 2014-12-4 18:15 2014-07-24 Show GitHub Exploit DB Packet Storm
210672 4.3 警告 OpenStack - OpenStack Dashboard の Users パネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3475 2014-12-4 18:14 2014-07-23 Show GitHub Exploit DB Packet Storm
210673 3.5 注意 OpenStack - OpenStack Dashboard の Launch Instance メニューの horizon/static/horizon/js/horizon.instances.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3474 2014-12-4 18:12 2014-07-23 Show GitHub Exploit DB Packet Storm
210674 4.3 警告 OpenStack - OpenStack Dashboard Horizon Orchestration dashboard の Orchestration/Stack セクションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3473 2014-12-4 18:09 2014-07-23 Show GitHub Exploit DB Packet Storm
210675 4.3 警告 Sunhater - SunHater KCFinder の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3988 2014-12-4 10:42 2014-06-17 Show GitHub Exploit DB Packet Storm
210676 7.2 危険 Thomson Reuters - Thomson Reuters Fixed Assets CS のインストーラにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9141 2014-12-4 10:42 2014-12-1 Show GitHub Exploit DB Packet Storm
210677 4.3 警告 Kennziffer.com - TYPO3 用 Questionnaire (ke_questionnaire) エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4956 2014-12-3 17:00 2011-10-9 Show GitHub Exploit DB Packet Storm
210678 7.5 危険 Kennziffer.com - TYPO3 用 Questionnaire (ke_questionnaire) エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4957 2014-12-3 16:59 2011-10-9 Show GitHub Exploit DB Packet Storm
210679 5.8 警告 アップル
GNU Project
- GNU patch の util.c におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4651 2014-12-3 16:33 2011-03-11 Show GitHub Exploit DB Packet Storm
210680 7.2 危険 CCH group - CCH Wolters Kluwer ProSystem fx Engagement におけるローカルシステムの権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9113 2014-12-3 16:17 2014-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252201 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KEYS: prevent NULL pointer dereference in find_asymmetric_key() In find_asymmetric_key(), if all NULLs are passed in the id_{0,1,… CWE-476
 NULL Pointer Dereference
CVE-2024-47743 2024-10-23 00:45 2024-10-21 Show GitHub Exploit DB Packet Storm
252202 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock Use a dedicated mutex to guard kvm_usage_count to fix a pot… CWE-667
 Improper Locking
CVE-2024-47744 2024-10-23 00:44 2024-10-21 Show GitHub Exploit DB Packet Storm
252203 4.8 MEDIUM
Network
code-projects pharmacy_management A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /manage_medicine.php of t… CWE-79
Cross-site Scripting
CVE-2024-10199 2024-10-23 00:40 2024-10-21 Show GitHub Exploit DB Packet Storm
252204 4.8 MEDIUM
Network
code-projects pharmacy_management A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /manage_customer… CWE-79
Cross-site Scripting
CVE-2024-10198 2024-10-23 00:39 2024-10-21 Show GitHub Exploit DB Packet Storm
252205 4.8 MEDIUM
Network
heimkino-praxis movie_database Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bert Kößler Movie Database allows Stored XSS.This issue affects Movie Database: from n/a t… CWE-79
Cross-site Scripting
CVE-2024-43300 2024-10-23 00:35 2024-10-18 Show GitHub Exploit DB Packet Storm
252206 8.8 HIGH
Network
sermonaudio sermonaudio_widgets Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: fr… CWE-89
SQL Injection
CVE-2024-49614 2024-10-23 00:34 2024-10-20 Show GitHub Exploit DB Packet Storm
252207 8.8 HIGH
Network
lodelgeraldo simple_code_insert_shortcode Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lodel Geraldo Simple Code Insert Shortcode allows SQL Injection.This issue affects Simple Code In… CWE-89
SQL Injection
CVE-2024-49613 2024-10-23 00:29 2024-10-20 Show GitHub Exploit DB Packet Storm
252208 6.3 MEDIUM
Network
dell secure_connect_gateway Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vuln… CWE-276
Incorrect Default Permissions 
CVE-2024-47240 2024-10-23 00:28 2024-10-18 Show GitHub Exploit DB Packet Storm
252209 6.1 MEDIUM
Network
madrasthemes mas_companies_for_wp_job_manager The MAS Companies For WP Job Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to… CWE-79
Cross-site Scripting
CVE-2024-9206 2024-10-23 00:27 2024-10-18 Show GitHub Exploit DB Packet Storm
252210 4.3 MEDIUM
Network
smackcoders sendgrid The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wp_mailplus_clear_logs' function in all versions up to, and includ… CWE-862
 Missing Authorization
CVE-2024-9364 2024-10-23 00:26 2024-10-18 Show GitHub Exploit DB Packet Storm