Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 10 危険 PHP Enter - PHP Enter の admin/banners.php における horad.php への任意の PHP コード を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-6046 2012-11-28 14:57 2012-11-27 Show GitHub Exploit DB Packet Storm
228452 4.3 警告 ramui.com - Ramui Forum の gb/user/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6045 2012-11-28 14:56 2012-11-27 Show GitHub Exploit DB Packet Storm
228453 10 危険 Joobi - Joomla! 用 Jstore コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-5286 2012-11-28 14:55 2012-11-26 Show GitHub Exploit DB Packet Storm
228454 6.8 警告 Open Dynamics - Collabtive の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-5285 2012-11-28 14:32 2012-11-26 Show GitHub Exploit DB Packet Storm
228455 4.3 警告 Open Dynamics - Collabtive におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5284 2012-11-28 14:31 2012-11-26 Show GitHub Exploit DB Packet Storm
228456 6.8 警告 OpenText - OpenText ECM におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-5283 2012-11-28 14:30 2012-11-26 Show GitHub Exploit DB Packet Storm
228457 4.3 警告 OpenText - OpenText ECM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5282 2012-11-28 14:29 2012-11-26 Show GitHub Exploit DB Packet Storm
228458 6.8 警告 net4visions - IBrowser TinyMCE プラグインの CMScout 内の ibrowser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-5281 2012-11-28 14:27 2012-11-26 Show GitHub Exploit DB Packet Storm
228459 7.5 危険 Joomla-CBE - Joomla! 用 CBE コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-5280 2012-11-28 14:26 2012-11-26 Show GitHub Exploit DB Packet Storm
228460 4.3 警告 Matthew James - M-Player におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6044 2012-11-28 14:23 2012-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248731 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL dereference at band check in starting tx ba session In MLD connection, link_data/link_conf are dynamical… CWE-476
 NULL Pointer Dereference 		CVE-2024-43911 2024-11-9 01:15 2024-08-26 Show GitHub Exploit DB Packet Storm
248732 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and … CWE-476
 NULL Pointer Dereference 		CVE-2024-43904 2024-11-9 01:15 2024-08-26 Show GitHub Exploit DB Packet Storm
248733 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6_mc_down() at most once There are two reasons for addrconf_notify() to be called with NETDEV_DOWN: … NVD-CWE-noinfo
CVE-2022-48910 2024-11-9 01:15 2024-08-22 Show GitHub Exploit DB Packet Storm
248734 8.0 HIGH
Adjacent 		enelx waybox_pro_firmware A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. CWE-787
 Out-of-bounds Write 		CVE-2023-29125 2024-11-9 01:10 2024-11-6 Show GitHub Exploit DB Packet Storm
248735 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. NVD-CWE-Other
CVE-2023-29121 2024-11-9 01:09 2024-11-6 Show GitHub Exploit DB Packet Storm
248736 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system. CWE-78
OS Command  		CVE-2023-29120 2024-11-9 01:09 2024-11-6 Show GitHub Exploit DB Packet Storm
248737 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php. CWE-89
SQL Injection 		CVE-2023-29119 2024-11-9 01:09 2024-11-6 Show GitHub Exploit DB Packet Storm
248738 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. CWE-89
SQL Injection 		CVE-2023-29118 2024-11-9 01:08 2024-11-6 Show GitHub Exploit DB Packet Storm
248739 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system. CWE-287
Improper Authentication 		CVE-2023-29117 2024-11-9 01:08 2024-11-6 Show GitHub Exploit DB Packet Storm
248740 4.3 MEDIUM
Adjacent 		enelx waybox_pro_firmware Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained. NVD-CWE-noinfo
CVE-2023-29116 2024-11-9 01:08 2024-11-6 Show GitHub Exploit DB Packet Storm