Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228371 10 危険 Google - Google Chrome における脆弱性 CWE-noinfo
情報不足 		CVE-2012-5138 2012-12-5 11:48 2012-11-29 Show GitHub Exploit DB Packet Storm
228372 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-5137 2012-12-5 11:46 2012-11-29 Show GitHub Exploit DB Packet Storm
228373 7.5 危険 Google - Google Chrome OS の WebGL サブシステムにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5129 2012-12-5 11:39 2012-11-30 Show GitHub Exploit DB Packet Storm
228374 7.5 危険 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4479 2012-12-4 16:28 2012-07-11 Show GitHub Exploit DB Packet Storm
228375 6.8 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4478 2012-12-4 16:27 2012-07-11 Show GitHub Exploit DB Packet Storm
228376 5 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4477 2012-12-4 16:27 2012-07-11 Show GitHub Exploit DB Packet Storm
228377 4.3 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4476 2012-12-4 16:26 2012-07-11 Show GitHub Exploit DB Packet Storm
228378 5 警告 Chris Hertzog - Drupal 用 Security Questions モジュールにおける任意のユーザの質問および回答を編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4475 2012-12-4 16:26 2012-07-11 Show GitHub Exploit DB Packet Storm
228379 4.3 警告 Dennis Blake - Drupal 用 Colorbox Node モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4474 2012-12-4 16:24 2012-07-11 Show GitHub Exploit DB Packet Storm
228380 3.5 注意 Christian Johansson - Drupal 用 Restrict node page view モジュールにおける未公開のノードにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4473 2012-12-4 16:21 2012-07-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249301 9.0 CRITICAL
Network 		lollms lord_of_large_language_models A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this … CWE-79
Cross-site Scripting 		CVE-2024-6581 2024-11-2 04:38 2024-10-29 Show GitHub Exploit DB Packet Storm
249302 6.5 MEDIUM
Network 		trendmicro deep_discovery_inspector A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must… NVD-CWE-noinfo
CVE-2024-46903 2024-11-2 04:35 2024-10-23 Show GitHub Exploit DB Packet Storm
249303 - - - Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended t… - CVE-2024-49400 2024-11-2 04:35 2024-10-18 Show GitHub Exploit DB Packet Storm
249304 - - - A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. - CVE-2024-44573 2024-11-2 04:35 2024-09-12 Show GitHub Exploit DB Packet Storm
249305 9.8 CRITICAL
Network 		langchain langchain A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulatio… CWE-74
Injection 		CVE-2024-8309 2024-11-2 04:19 2024-10-29 Show GitHub Exploit DB Packet Storm
249306 6.1 MEDIUM
Network 		campusexplorer widget Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Campus Explorer Campus Explorer Widget allows Reflected XSS.This issue affects Campus Expl… CWE-79
Cross-site Scripting 		CVE-2024-49660 2024-11-2 04:01 2024-10-29 Show GitHub Exploit DB Packet Storm
249307 6.1 MEDIUM
Network 		webgensis simple_load_more Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webgensis Simple Load More allows Reflected XSS.This issue affects Simple Load More: from … CWE-79
Cross-site Scripting 		CVE-2024-49662 2024-11-2 03:56 2024-10-29 Show GitHub Exploit DB Packet Storm
249308 6.1 MEDIUM
Network 		leenk leenk.me Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lew Ayotte leenk.Me allows Reflected XSS.This issue affects leenk.Me: from n/a through 2.1… CWE-79
Cross-site Scripting 		CVE-2024-49661 2024-11-2 03:56 2024-10-29 Show GitHub Exploit DB Packet Storm
249309 5.4 MEDIUM
Network 		webbricks web_bricks_addons Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Web Bricks Web Bricks Addons for Elementor allows Stored XSS.This issue affects Web Bricks… CWE-79
Cross-site Scripting 		CVE-2024-49665 2024-11-2 03:55 2024-10-29 Show GitHub Exploit DB Packet Storm
249310 6.1 MEDIUM
Network 		chatplusjp chatplusjp Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in allows Reflected XSS.This issue affects chatplusjp: from n/a through 1.02. CWE-79
Cross-site Scripting 		CVE-2024-49664 2024-11-2 03:55 2024-10-29 Show GitHub Exploit DB Packet Storm