Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228651 2.6 注意 アシアル株式会社 - Android 版 Monacaデバッガーにおける情報管理不備の脆弱性 CWE-200
情報漏えい
CVE-2012-5172 2012-11-16 12:02 2012-11-16 Show GitHub Exploit DB Packet Storm
228652 10 危険 マイクロソフト
Google
- Google Chrome で使用される Microsoft Windows のカーネルモードドライバにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-2897 2012-11-16 11:09 2012-09-25 Show GitHub Exploit DB Packet Storm
228653 4.3 警告 OTRS プロジェクト - Open Technology Real Services にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2582 2012-11-16 10:19 2012-08-23 Show GitHub Exploit DB Packet Storm
228654 3.6 注意 Shlomi Fish - Perl 用 Config::IniFiles モジュールにおける任意のファイルを上書きされる脆弱性 CWE-DesignError
CVE-2012-2451 2012-11-16 10:18 2012-06-27 Show GitHub Exploit DB Packet Storm
228655 4.9 警告 Linux - Linux Kernel の mm/hugetlb.c におけるサービス運用妨害 (メモリ消費またはシステムクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2390 2012-11-16 10:16 2012-06-13 Show GitHub Exploit DB Packet Storm
228656 2.6 注意 Moodle - Moodle のブログの実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2362 2012-11-16 10:15 2012-07-21 Show GitHub Exploit DB Packet Storm
228657 4.3 警告 SPIP - SPIP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2151 2012-11-16 10:11 2012-04-23 Show GitHub Exploit DB Packet Storm
228658 7.2 危険 Linux - Linux Kernel の net/core/sock.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-2136 2012-11-16 10:08 2012-08-9 Show GitHub Exploit DB Packet Storm
228659 4 警告 Oberthur Technologies - Oberthur のスマートカードに問題 CWE-noinfo
情報不足
CVE-2012-5860 2012-11-15 17:43 2012-11-12 Show GitHub Exploit DB Packet Storm
228660 5 警告 The Tor Project - Tor の common/util.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4922 2012-11-15 17:13 2012-09-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249771 - - - Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were not checked by the security policy. They are now checked via the property polic… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2024-51755 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
249772 - - - Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the security policy when the object is part of … CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2024-51754 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
249773 - - - Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file conte… - CVE-2024-51751 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
249774 - - - dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin. - CVE-2024-50966 2024-11-9 03:35 2024-11-9 Show GitHub Exploit DB Packet Storm
249775 - - - A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an unauthenticated attacker to conduct a com… - CVE-2024-35314 2024-11-9 03:15 2024-10-22 Show GitHub Exploit DB Packet Storm
249776 6.5 MEDIUM
Adjacent
- - A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of the Juniper Networks Junos OS on the MX Series platforms with Trio-based FPCs allows an una… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2024-47493 2024-11-9 03:15 2024-10-12 Show GitHub Exploit DB Packet Storm
249777 5.8 MEDIUM
Network
hashicorp consul A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules. CWE-116
 Improper Encoding or Escaping of Output
CVE-2024-10006 2024-11-9 03:10 2024-10-31 Show GitHub Exploit DB Packet Storm
249778 5.8 MEDIUM
Network
hashicorp consul A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules. CWE-22
Path Traversal
CVE-2024-10005 2024-11-9 03:10 2024-10-31 Show GitHub Exploit DB Packet Storm
249779 7.5 HIGH
Adjacent
hp poly_tc8_firmware
poly_tc10_firmware
poly_studio_g7500_firmware
poly_studio_x30_firmware
poly_studio_x50_firmware
poly_studio_x70_firmware
poly_studio_x52_firmware
poly_studio_g6…
A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a … CWE-77
Command Injection
CVE-2024-9579 2024-11-9 03:08 2024-11-6 Show GitHub Exploit DB Packet Storm
249780 7.8 HIGH
Local
adobe substance_3d_painter Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o… CWE-787
 Out-of-bounds Write
CVE-2024-49522 2024-11-9 03:06 2024-11-6 Show GitHub Exploit DB Packet Storm