Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228401 7.5 危険 Google - Android 用 QuIC Diagnostics カーネルモードドライバにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-4220 2012-12-3 15:21 2012-11-15 Show GitHub Exploit DB Packet Storm
228402 6.4 警告 Django Software Foundation - Django における任意の URL が表示される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4520 2012-11-30 18:16 2012-10-17 Show GitHub Exploit DB Packet Storm
228403 4.3 警告 ViewVC - ViewVC の lib/viewvc.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4533 2012-11-30 18:09 2012-10-24 Show GitHub Exploit DB Packet Storm
228404 5.4 警告 （複数のベンダ） - Android OS を搭載した複数の端末におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2012-11-30 17:59 2012-11-14 Show GitHub Exploit DB Packet Storm
228405 10 危険 Autonomy - Autonomy Keyview IDOL ライブラリに複数の脆弱性 - - 2012-11-30 17:52 2012-11-21 Show GitHub Exploit DB Packet Storm
228406 1.2 注意 Munin - Munin 用 qmailscan プラグインにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-2103 2012-11-30 17:50 2012-08-26 Show GitHub Exploit DB Packet Storm
228407 5 警告 Apache Software Foundation - Apache POI におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0213 2012-11-30 15:09 2012-08-7 Show GitHub Exploit DB Packet Storm
228408 5 警告 日本電気
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
VMware
日立
レッドハット		 - Sun JRE で使用している Apache Xerces2 Java におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2625 2012-11-30 14:55 2009-08-5 Show GitHub Exploit DB Packet Storm
228409 4.3 警告 オラクル - Oracle OpenSSO における認証の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0079 2012-11-30 14:51 2012-01-17 Show GitHub Exploit DB Packet Storm
228410 6.5 警告 Esri - ArcGIS Server に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4949 2012-11-30 13:41 2012-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249701 - - - JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. - CVE-2024-48307 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249702 - - - A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprof… CWE-352
 Origin Validation Error 		CVE-2024-10557 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249703 - - - A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file birdsadd.php. The manipulation of the argument id … CWE-89
SQL Injection 		CVE-2024-10556 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249704 - - - Cross Site Scripting vulnerability in Shenzhen Interconnection Harbor Network Technology Co., Ltd Ofweek Online Exhibition v.1.0.0 allows a remote attacker to execute arbitrary code. - CVE-2024-51419 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249705 - - - The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deployment servers of this management system via DeployController.java. - CVE-2024-51243 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249706 - - - A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF. - CVE-2024-51242 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249707 - - - Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter. - CVE-2024-48807 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249708 - - - xtreme1 <= v0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the /api/data/upload path. The vulnerability is triggered through the fileUrl parameter, which allows an attacker to m… - CVE-2024-48346 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249709 - - - A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. - CVE-2024-48112 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm
249710 - - - Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file exte… - CVE-2024-48093 2024-11-1 21:57 2024-10-31 Show GitHub Exploit DB Packet Storm