Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228481 5 警告 Ruby-lang.org - Ruby の file.c におけるファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4522 2012-11-27 16:56 2012-10-12 Show GitHub Exploit DB Packet Storm
228482 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6037 2012-11-27 16:55 2012-10-10 Show GitHub Exploit DB Packet Storm
228483 4.3 警告 Mahara - Mahara の group/members.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2253 2012-11-27 16:54 2012-11-23 Show GitHub Exploit DB Packet Storm
228484 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2247 2012-11-27 16:53 2012-10-10 Show GitHub Exploit DB Packet Storm
228485 6.8 警告 Mahara - Mahara における任意のユーザを削除されるおよび CSRF 保護を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2246 2012-11-27 16:53 2012-10-10 Show GitHub Exploit DB Packet Storm
228486 6 警告 Mahara - Mahara における任意のプログラムを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2244 2012-11-27 16:52 2012-10-9 Show GitHub Exploit DB Packet Storm
228487 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2243 2012-11-27 16:52 2012-10-9 Show GitHub Exploit DB Packet Storm
228488 6.4 警告 Mahara - Mahara おける任意のファイルを読まれる脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2239 2012-11-27 16:51 2012-09-13 Show GitHub Exploit DB Packet Storm
228489 7.5 危険 PS Project Management Team - Firefox 用 Unity integration 拡張機能におけるサービス運用妨害 (Firefox クラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0960 2012-11-27 16:50 2012-11-8 Show GitHub Exploit DB Packet Storm
228490 2.1 注意 Remote Login Service Hackers - Remote Login Service におけるログイン認証を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0959 2012-11-27 16:50 2012-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249411 - - - A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /module/word_model/view/index.php. The … CWE-89
SQL Injection 		CVE-2024-10732 2024-11-4 10:35 2024-11-3 Show GitHub Exploit DB Packet Storm
249412 - - - A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/check_seal.php. The manipulation of the argument ID l… CWE-89
SQL Injection 		CVE-2024-10731 2024-11-4 10:35 2024-11-3 Show GitHub Exploit DB Packet Storm
249413 - - - A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6. This issue affects some unknown processing of the file /pda/appcenter/web_show.php. The manipulation of the … CWE-89
SQL Injection 		CVE-2024-10730 2024-11-4 10:35 2024-11-3 Show GitHub Exploit DB Packet Storm
249414 - - - A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the a… CWE-121
Stack-based Buffer Overflow 		CVE-2024-10698 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249415 - - - A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API… - CVE-2024-10697 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249416 6.1 MEDIUM
Network 		- - The BBP Core – Expand bbPress powered forums with useful features plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on … - CVE-2024-9896 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249417 5.4 MEDIUM
Network 		- - The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget '… CWE-79
Cross-site Scripting 		CVE-2024-9868 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249418 6.1 MEDIUM
Network 		- - The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up… CWE-79
Cross-site Scripting 		CVE-2024-8739 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249419 5.3 MEDIUM
Network 		- - The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'service' parameter of the bookingpress_form shortcode in all … CWE-89
SQL Injection 		CVE-2024-10540 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249420 6.4 MEDIUM
Network 		- - The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Gallery Wi… CWE-79
Cross-site Scripting 		CVE-2024-10310 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm