Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228531 6.5 警告 Moodle - Moodle の Portfolio プラグインにおけるファイルをアップロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5479 2012-11-22 15:19 2012-11-19 Show GitHub Exploit DB Packet Storm
228532 4 警告 Moodle - Moodle における異なるグループユーザの活動エントリを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-5473 2012-11-22 15:18 2012-11-19 Show GitHub Exploit DB Packet Storm
228533 4 警告 Moodle - Moodle の lib/formslib.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5472 2012-11-22 15:16 2012-11-19 Show GitHub Exploit DB Packet Storm
228534 6.5 警告 Moodle - Moodle の Dropbox Repository File Picker における異なるユーザの Dropbox にアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5471 2012-11-22 15:15 2012-11-19 Show GitHub Exploit DB Packet Storm
228535 6.9 警告 Mozilla Foundation - Mozilla Firefox のインストーラにおける権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-4206 2012-11-22 12:08 2012-11-20 Show GitHub Exploit DB Packet Storm
228536 5 警告 CA Technologies - Windows 上で稼働する CA ARCserve Backup におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2972 2012-11-21 18:03 2012-10-18 Show GitHub Exploit DB Packet Storm
228537 7.5 危険 CA Technologies - Windows 上で稼働する CA ARCserve Backup のサーバにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2971 2012-11-21 18:01 2012-10-18 Show GitHub Exploit DB Packet Storm
228538 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1956 2012-11-21 17:42 2012-08-28 Show GitHub Exploit DB Packet Storm
228539 5 警告 VMware - VMware ESXi および ESX の vSphere API におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5703 2012-11-21 15:40 2012-11-15 Show GitHub Exploit DB Packet Storm
228540 7.1 危険 アドビシステムズ - Adobe ColdFusion におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-5674 2012-11-21 15:37 2012-11-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249311 9.8 CRITICAL
Network 		esafenet cdg A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulati… CWE-89
SQL Injection 		CVE-2024-10279 2024-11-5 07:14 2024-10-23 Show GitHub Exploit DB Packet Storm
249312 9.8 CRITICAL
Network 		esafenet cdg A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation o… CWE-89
SQL Injection 		CVE-2024-10277 2024-11-5 07:13 2024-10-23 Show GitHub Exploit DB Packet Storm
249313 9.8 CRITICAL
Network 		esafenet cdg A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of th… CWE-89
SQL Injection 		CVE-2024-10278 2024-11-5 07:11 2024-10-23 Show GitHub Exploit DB Packet Storm
249314 7.2 HIGH
Network 		radixiot mango MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command feature. CWE-78
OS Command  		CVE-2024-37845 2024-11-5 06:53 2024-10-26 Show GitHub Exploit DB Packet Storm
249315 - - - Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the login.php. - CVE-2024-48410 2024-11-5 06:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249316 - - - An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. - CVE-2024-40490 2024-11-5 06:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249317 - - - Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and … - CVE-2024-45504 2024-11-5 06:35 2024-09-10 Show GitHub Exploit DB Packet Storm
249318 - - - Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.. - CVE-2024-27184 2024-11-5 06:35 2024-08-21 Show GitHub Exploit DB Packet Storm
249319 - - - An issue in the Bluetooth Low Energy implementation of Cypress Bluetooth SDK v3.66 allows attackers to cause a Denial of Service (DoS) via supplying a crafted LL_PAUSE_ENC_REQ packet. - CVE-2024-48289 2024-11-5 05:35 2024-11-2 Show GitHub Exploit DB Packet Storm
249320 - - - Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component. - CVE-2024-27525 2024-11-5 05:35 2024-11-2 Show GitHub Exploit DB Packet Storm