Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228591 5 警告 DFLabs - DFLabs PTK におけるログなどを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5901 2012-11-20 13:52 2012-11-17 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 SAMEDIA O.E. - SAMEDIA LandShop における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5900 2012-11-20 13:49 2012-11-17 Show GitHub Exploit DB Packet Storm
228593 4.3 警告 SAMEDIA O.E. - SAMEDIA LandShop の admin/action/objects.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5899 2012-11-20 13:48 2012-11-17 Show GitHub Exploit DB Packet Storm
228594 6.8 警告 SAMEDIA O.E. - SAMEDIA LandShop におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5898 2012-11-20 13:47 2012-11-17 Show GitHub Exploit DB Packet Storm
228595 10 危険 Quest Software Inc. - Quest InTrust の AnnotateX.dll における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2012-5896 2012-11-20 13:43 2012-11-17 Show GitHub Exploit DB Packet Storm
228596 10 危険 iRODS - iRODS における脆弱性 CWE-noinfo
情報不足 		CVE-2012-5895 2012-11-20 13:43 2012-03-16 Show GitHub Exploit DB Packet Storm
228597 7.5 危険 Havalite - Havalite CMS の hava_post.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5894 2012-11-20 13:42 2012-11-17 Show GitHub Exploit DB Packet Storm
228598 6.8 警告 Havalite - Havalite CMS の hava_upload.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2012-5893 2012-11-20 13:41 2012-11-17 Show GitHub Exploit DB Packet Storm
228599 5 警告 Havalite - Havalite CMS における構成データベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5892 2012-11-20 13:40 2012-11-17 Show GitHub Exploit DB Packet Storm
228600 6.8 警告 Alexei Shamov - DAlbum の photo/pass.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5891 2012-11-20 13:38 2012-11-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248761 - - - Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1.5.02.00 may allow a privileged user to potentially enable escalation of privil… CWE-226
 Sensitive Information in Resource Not Removed Before Reuse 		CVE-2024-21850 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248762 - - - Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via… CWE-276
Incorrect Default Permissions  		CVE-2024-21820 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248763 - - - Improper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-92
 DEPRECATED: Improper Sanitization of Custom Special Characters 		CVE-2024-21808 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248764 - - - Path traversal for some Intel(R) Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-22
Path Traversal 		CVE-2024-21799 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248765 - - - Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-190
 Integer Overflow or Wraparound 		CVE-2024-21783 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248766 - - - An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext within application logs. This flaw results in the unintentional exposure of se… - CVE-2024-11193 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248767 - - - In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. U… - CVE-2024-43091 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248768 - - - In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interac… - CVE-2024-43090 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248769 - - - In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional exec… - CVE-2024-43089 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
248770 - - - In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the device due to a missing permission check. This could lead to … - CVE-2024-43088 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm