Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228711	5	警告	Best Practical Solutions	-	Request Tracker におけるクロスサイトリクエストフォージェリ (CSRF) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4734	2012-11-13 16:12	2012-10-25	Show	GitHub Exploit DB Packet Storm

228712	6.8	警告	Best Practical Solutions	-	Request Tracker におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4732	2012-11-13 16:11	2012-10-25	Show	GitHub Exploit DB Packet Storm

228713	4	警告	Best Practical Solutions	-	Request Tracker 用 FAQ マネージャにおける任意のクラスの任意の記事を作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4731	2012-11-13 16:10	2012-10-25	Show	GitHub Exploit DB Packet Storm

228714	3.5	注意	Best Practical Solutions	-	Request Tracker における任意のメールヘッダを挿入される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4730	2012-11-13 16:08	2012-10-25	Show	GitHub Exploit DB Packet Storm

228715	5	警告	Drupal	-	Drupal の OpenID モジュールおける任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4554	2012-11-13 15:59	2012-10-17	Show	GitHub Exploit DB Packet Storm

228716	6.8	警告	Drupal	-	Drupal における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4553	2012-11-13 15:58	2012-10-17	Show	GitHub Exploit DB Packet Storm

228717	7.5	危険	Quagga インターネットイニシアティブ	-	Quagga の ecommunity_ecom2str 関数におけるにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3327	2012-11-13 15:11	2011-09-26	Show	GitHub Exploit DB Packet Storm

228718	5	警告	Quagga インターネットイニシアティブ	-	Quagga の ospf_flood 関数におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3326	2012-11-13 15:10	2011-09-26	Show	GitHub Exploit DB Packet Storm

228719	5	警告	Quagga インターネットイニシアティブ	-	Quagga の ospfd 内の ospf_packet.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3325	2012-11-13 15:09	2011-09-26	Show	GitHub Exploit DB Packet Storm

228720	5	警告	Quagga インターネットイニシアティブ	-	Quagga の ospf6_lsa.c 内にある ospf6_lsa_is_changed 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3324	2012-11-13 15:08	2011-09-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249491	-		-	-	Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server.	-	CVE-2024-39332	2024-11-2 01:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

249492	-		-	-	Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.	-	CVE-2023-52044	2024-11-2 01:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

249493	-		-	-	The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges t…	CWE-59 Link Following	CVE-2024-45315	2024-11-2 01:35	2024-10-11	Show	GitHub Exploit DB Packet Storm

249494	-		-	-	Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/…	-	CVE-2024-8037	2024-11-2 01:35	2024-10-2	Show	GitHub Exploit DB Packet Storm

249495	9.8	CRITICAL Network	tenda	ac1206_firmware	A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function ate_Tenda_mfg_check_usb/ate_Tenda_mfg_check_usb3 of the file /goform/ate. The m…	CWE-787 Out-of-bounds Write	CVE-2024-10434	2024-11-2 01:32	2024-10-28	Show	GitHub Exploit DB Packet Storm

249496	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, wri…	CWE-787 Out-of-bounds Write	CVE-2024-9997	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

249497	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, …	CWE-787 Out-of-bounds Write	CVE-2024-9996	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

249498	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write …	CWE-787 Out-of-bounds Write	CVE-2024-9489	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

249499	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a …	CWE-908 Use of Uninitialized Resource	CVE-2024-8896	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

249500	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to …	CWE-787 Out-of-bounds Write	CVE-2024-7992	2024-11-2 01:26	2024-10-30	Show	GitHub Exploit DB Packet Storm