Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210881 6.4 警告 Web Component Roles project - Drupal 用 Webform Component Roles モジュールにおける disabled 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9022 2014-11-21 19:07 2014-11-11 Show GitHub Exploit DB Packet Storm
210882 6.8 警告 ZTE - ZTE ZXDSL 831CII におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9027 2014-11-21 18:28 2014-11-6 Show GitHub Exploit DB Packet Storm
210883 4.3 警告 ZTE - ZTE ZXDSL 831 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9021 2014-11-21 18:27 2014-11-6 Show GitHub Exploit DB Packet Storm
210884 4.3 警告 ZTE - ZTE ZXDSL 831 および 831CII の Quick Stats ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9020 2014-11-21 18:27 2014-11-6 Show GitHub Exploit DB Packet Storm
210885 6.8 警告 ZTE - ZTE ZXDSL 831CII におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9019 2014-11-21 18:24 2014-11-6 Show GitHub Exploit DB Packet Storm
210886 4 警告 OpenStack
Canonical		 - OpenStack Image Registry and Delivery Service におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-5356 2014-11-21 18:17 2014-05-22 Show GitHub Exploit DB Packet Storm
210887 6.9 警告 Linux - Linux Kernel の Magic Mouse HID ドライバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-3181 2014-11-21 18:16 2014-08-27 Show GitHub Exploit DB Packet Storm
210888 6.9 警告 Linux - Linux Kernel の drivers/hid/hid-logitech-dj.c の logi_dj_raw_event 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-3182 2014-11-21 18:16 2014-09-5 Show GitHub Exploit DB Packet Storm
210889 4.7 警告 Linux - Linux Kernel の HID サブシステムの report_fixup 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-3184 2014-11-21 18:15 2014-09-5 Show GitHub Exploit DB Packet Storm
210890 9.3 危険 オラクル - Oracle Java SE における Libraries に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6562 2014-11-21 18:08 2014-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252031 7.8 HIGH
Local 		sangoma certified_asterisk
asterisk 		An issue was discovered in Sangoma Asterisk through 18.20.0, 19.x and 20.x through 20.5.0, and 21.x through 21.0.0, and Certified Asterisk through 18.9-cert5. In manager.c, the functions action_getco… CWE-22
Path Traversal 		CVE-2024-49215 2024-10-24 23:10 2024-10-21 Show GitHub Exploit DB Packet Storm
252032 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't return OOB skb in manage_oob(). syzbot reported use-after-free in unix_stream_recv_urg(). [0] The scenario is … CWE-416
 Use After Free 		CVE-2024-47711 2024-10-24 23:03 2024-10-21 Show GitHub Exploit DB Packet Storm
252033 9.8 CRITICAL
Network 		elecom wab-i1750-ps_firmware
wab-s1167-ps_firmware 		Stack-based buffer overflow vulnerability exists in WAB-I1750-PS and WAB-S1167-PS. By processing a specially crafted HTTP request, arbitrary code may be executed. CWE-787
 Out-of-bounds Write 		CVE-2024-43689 2024-10-24 23:02 2024-10-21 Show GitHub Exploit DB Packet Storm
252034 7.5 HIGH
Network 		wellchoose administrative_management_system Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server. CWE-22
Path Traversal 		CVE-2024-10200 2024-10-24 22:57 2024-10-21 Show GitHub Exploit DB Packet Storm
252035 7.2 HIGH
Network 		total-soft ts_poll The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks CWE-89
SQL Injection 		CVE-2024-8625 2024-10-24 22:56 2024-10-21 Show GitHub Exploit DB Packet Storm
252036 8.8 HIGH
Network 		wellchoose administrative_management_system Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-10201 2024-10-24 22:56 2024-10-21 Show GitHub Exploit DB Packet Storm
252037 8.8 HIGH
Network 		wellchoose administrative_management_system Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands. CWE-78
OS Command  		CVE-2024-10202 2024-10-24 22:55 2024-10-21 Show GitHub Exploit DB Packet Storm
252038 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netkit: Assign missing bpf_net_context During the introduction of struct bpf_net_context handling for XDP-redirect, the netkit dr… CWE-476
 NULL Pointer Dereference 		CVE-2024-47708 2024-10-24 22:45 2024-10-21 Show GitHub Exploit DB Packet Storm
252039 7.2 HIGH
Network 		funnelkit funnelkit_automations Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Automation By Autonami allows SQL Injection.This issue affects Automation By Autonami: … CWE-89
SQL Injection 		CVE-2024-47328 2024-10-24 22:45 2024-10-21 Show GitHub Exploit DB Packet Storm
252040 8.8 HIGH
Network 		latepoint latepoint Cross-Site Request Forgery (CSRF) vulnerability in Latepoint LatePoint allows Cross Site Request Forgery.This issue affects LatePoint: from n/a through 4.9.91. CWE-352
 Origin Validation Error 		CVE-2024-43945 2024-10-24 22:45 2024-10-21 Show GitHub Exploit DB Packet Storm