Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228271 5 警告 コルネ株式会社 - Welcart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5177 2012-12-14 12:02 2012-12-14 Show GitHub Exploit DB Packet Storm
228272 4.3 警告 Zoho Corporation - ManageEngine AssetExplorer にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5956 2012-12-13 18:21 2012-12-7 Show GitHub Exploit DB Packet Storm
228273 5 警告 Layton Technology - Layton Helpbox におけるログインページの平文の認証情報を漏えいする脆弱性 CWE-310
暗号の問題 		CVE-2012-4977 2012-12-13 15:30 2012-12-12 Show GitHub Exploit DB Packet Storm
228274 5 警告 Layton Technology - Layton Helpbox における ODBC データベースの認証情報を漏えいする脆弱性 CWE-200
情報漏えい 		CVE-2012-4976 2012-12-13 15:29 2012-12-12 Show GitHub Exploit DB Packet Storm
228275 4 警告 Layton Technology - Layton Helpbox における任意のサポートチケットのデータを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4975 2012-12-13 15:26 2012-12-12 Show GitHub Exploit DB Packet Storm
228276 6.5 警告 Layton Technology - Layton Helpbox における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4974 2012-12-13 15:25 2012-12-12 Show GitHub Exploit DB Packet Storm
228277 4.3 警告 Layton Technology - Layton Helpbox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4972 2012-12-13 15:25 2012-12-12 Show GitHub Exploit DB Packet Storm
228278 9.4 危険 Layton Technology - Layton Helpbox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4971 2012-12-13 15:23 2012-12-12 Show GitHub Exploit DB Packet Storm
228279 10 危険 Google - Google Chrome におけるサービス運用妨害 (スタックメモリ破損) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5144 2012-12-13 15:21 2012-12-11 Show GitHub Exploit DB Packet Storm
228280 10 危険 Google - Google Chrome における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-5143 2012-12-13 15:20 2012-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249071 5.4 MEDIUM
Network 		webcraftplugins image_map_pro The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.… CWE-862
 Missing Authorization 		CVE-2024-9584 2024-11-6 02:04 2024-10-26 Show GitHub Exploit DB Packet Storm
249072 3.5 LOW
Network 		mattermost mattermost Mattermost versions 9.11.X <= 9.11.1, 9.5.x <= 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings. NVD-CWE-Other
CVE-2024-10214 2024-11-6 02:03 2024-10-29 Show GitHub Exploit DB Packet Storm
249073 9.8 CRITICAL
Network 		fabinros simple_car_rental_system A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname le… CWE-89
SQL Injection 		CVE-2024-10702 2024-11-6 01:52 2024-11-3 Show GitHub Exploit DB Packet Storm
249074 6.1 MEDIUM
Network 		phpgurukul car_rental_portal A vulnerability was found in PHPGurukul Car Rental Portal 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search.php. The manipulation of the argument s… CWE-79
Cross-site Scripting 		CVE-2024-10701 2024-11-6 01:52 2024-11-3 Show GitHub Exploit DB Packet Storm
249075 6.5 MEDIUM
Network 		cert vince VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users. CWE-276
Incorrect Default Permissions  		CVE-2024-10469 2024-11-6 01:51 2024-10-29 Show GitHub Exploit DB Packet Storm
249076 4.8 MEDIUM
Adjacent 		argo_workflows_project argo_workflows Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controll… CWE-362
CWE-1108
Race Condition
 Excessive Reliance on Global Variables 		CVE-2024-47827 2024-11-6 01:50 2024-10-29 Show GitHub Exploit DB Packet Storm
249077 7.5 HIGH
Network 		squid-cache squid Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resour… NVD-CWE-noinfo
CVE-2024-45802 2024-11-6 01:45 2024-10-29 Show GitHub Exploit DB Packet Storm
249078 7.5 HIGH
Network 		ruby-lang rexml REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). … CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2024-49761 2024-11-6 01:41 2024-10-29 Show GitHub Exploit DB Packet Storm
249079 7.5 HIGH
Network 		ibm cics_transaction_gateway IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retr… CWE-522
 Insufficiently Protected Credentials 		CVE-2023-50310 2024-11-6 01:40 2024-10-23 Show GitHub Exploit DB Packet Storm
249080 - - - Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via… - CVE-2024-52030 2024-11-6 01:35 2024-11-6 Show GitHub Exploit DB Packet Storm