Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228191 4.3 警告 Andy Armstrong
レッドハット
VMware
オラクル		 - CGI.pm および CGI::Simple の multipart_init 関数における任意の HTTP ヘッダを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2761 2012-12-17 16:21 2010-12-6 Show GitHub Exploit DB Packet Storm
228192 5 警告 VMware
Linux		 - Linux Kernel の xfrm6_tunnel_rcv 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1583 2012-12-17 16:18 2012-06-16 Show GitHub Exploit DB Packet Storm
228193 7.8 危険 VMware
Linux
オラクル		 - Linux Kernel の IPv6 の実装におけるサービス運用妨害 (ネットワーク障害) の脆弱性 CWE-DesignError
CVE-2011-2699 2012-12-17 16:16 2012-05-24 Show GitHub Exploit DB Packet Storm
228194 7.8 危険 VMware
Linux		 - Linux Kernel の igmp_heard_query 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0207 2012-12-17 16:13 2012-05-17 Show GitHub Exploit DB Packet Storm
228195 4.9 警告 VMware
Linux		 - Linux kernel の NFS 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2011-4325 2012-12-17 16:12 2012-01-27 Show GitHub Exploit DB Packet Storm
228196 4.9 警告 VMware
Linux		 - Linux Kernel の encode_share_access 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-4324 2012-12-17 16:10 2012-06-21 Show GitHub Exploit DB Packet Storm
228197 2.1 注意 VMware
Linux		 - Linux kernel におけるサービス運用妨害 (アサーションエラーおよび kernel oops) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4132 2012-12-17 16:08 2012-01-27 Show GitHub Exploit DB Packet Storm
228198 2.1 注意 VMware
Linux		 - Linux kernel の proc ファイルシステム実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1020 2012-12-17 16:06 2011-02-28 Show GitHub Exploit DB Packet Storm
228199 2.1 注意 VMware
Linux		 - Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび kernel oops) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4110 2012-12-17 16:02 2012-01-27 Show GitHub Exploit DB Packet Storm
228200 5.4 警告 VMware
Linux		 - Linux Kernel の setup_cifs_sb 関数におけるサービス運用妨害 (システムクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3363 2012-12-17 16:00 2012-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249801 5.4 MEDIUM
Network 		cisco secure_firewall_management_center A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack … CWE-79
Cross-site Scripting 		CVE-2024-20264 2024-11-1 04:04 2024-10-24 Show GitHub Exploit DB Packet Storm
249802 6.1 MEDIUM
Network 		abdullahirfan whitelist Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Abdullah Irfan Whitelist allows Reflected XSS.This issue affects Whitelist: from n/a throu… CWE-79
Cross-site Scripting 		CVE-2024-49643 2024-11-1 03:48 2024-10-29 Show GitHub Exploit DB Packet Storm
249803 6.5 MEDIUM
Network 		lunary lunary lunary-ai/lunary v1.2.26 contains an email injection vulnerability in the Send email verification API (/v1/users/send-verification) and Sign up API (/auth/signup). An unauthenticated attacker can inj… CWE-74
Injection 		CVE-2024-7472 2024-11-1 03:46 2024-10-29 Show GitHub Exploit DB Packet Storm
249804 9.8 CRITICAL
Network 		langchain langchain A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability p… CWE-89
SQL Injection 		CVE-2024-7042 2024-11-1 03:36 2024-10-29 Show GitHub Exploit DB Packet Storm
249805 9.1 CRITICAL
Network 		gaizhenbiao chuanhuchatgpt A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files w… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2024-5823 2024-11-1 03:05 2024-10-29 Show GitHub Exploit DB Packet Storm
249806 6.1 MEDIUM
Network 		soft-master affiliate_platform Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ilias Gomatos Affiliate Platform allows Reflected XSS.This issue affects Affiliate Platfor… CWE-79
Cross-site Scripting 		CVE-2024-49645 2024-11-1 02:59 2024-10-29 Show GitHub Exploit DB Packet Storm
249807 6.1 MEDIUM
Network 		wedevs wp_erp Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in weDevs WP ERP allows Reflected XSS.This issue affects WP ERP: from n/a through 1.13.2. CWE-79
Cross-site Scripting 		CVE-2024-47640 2024-11-1 02:39 2024-10-29 Show GitHub Exploit DB Packet Storm
249808 - - - TYPO3 before 13.3.1 allows denial of service (interface error) in the Bookmark Toolbar (ext:backend), exploitable by an administrator-level backend user account via manipulated data saved in the book… - CVE-2024-34537 2024-11-1 02:15 2024-10-28 Show GitHub Exploit DB Packet Storm
249809 7.5 HIGH
Network 		- - IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue m… CWE-266
 Incorrect Privilege Assignment 		CVE-2024-40681 2024-11-1 02:15 2024-09-8 Show GitHub Exploit DB Packet Storm
249810 5.5 MEDIUM
Local 		ibm mq_operator IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-40680 2024-11-1 02:15 2024-09-7 Show GitHub Exploit DB Packet Storm