Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228811 5.8 警告 PrestaShop
Presto-Changeo
- PrestaShop の Canada Post モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5799 2012-11-7 16:31 2012-11-4 Show GitHub Exploit DB Packet Storm
228812 5.8 警告 osCommerce - osCommerce の PayPal Pro PayFlow EC モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5798 2012-11-7 16:31 2012-11-4 Show GitHub Exploit DB Packet Storm
228813 5.8 警告 jasonabc
osCommerce
- osCommerce の PayPal Payflow Pro モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5797 2012-11-7 16:30 2012-11-4 Show GitHub Exploit DB Packet Storm
228814 5.8 警告 osCommerce
PayPal
- osCommerce の PayPal Pro モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5796 2012-11-7 16:29 2012-11-4 Show GitHub Exploit DB Packet Storm
228815 5.8 警告 osCommerce
akunamachata
- osCommerce の PayPal Express モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5795 2012-11-7 16:28 2012-11-4 Show GitHub Exploit DB Packet Storm
228816 5.8 警告 osCommerce
Moneybookers
- osCommerce の MoneyBookers モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5794 2012-11-7 16:28 2012-11-4 Show GitHub Exploit DB Packet Storm
228817 5.8 警告 osCommerce
Harald Ponce de Leon
- osCommerce の Authorize.Net モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5793 2012-11-7 16:26 2012-11-4 Show GitHub Exploit DB Packet Storm
228818 5.8 警告 Sage Pay Europe Limited
osCommerce
- osCommerce の Sage Pay Direct モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5792 2012-11-7 16:15 2012-11-4 Show GitHub Exploit DB Packet Storm
228819 5.8 警告 PayPal - PayPal Invoicing における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5791 2012-11-7 14:45 2012-11-4 Show GitHub Exploit DB Packet Storm
228820 5.8 警告 PayPal - PayPal Payments Standard PHP ライブラリにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5790 2012-11-7 14:45 2012-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249031 - - - In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. Th… - CVE-2024-43093 2024-11-14 11:00 2024-11-14 Show GitHub Exploit DB Packet Storm
249032 7.8 HIGH
Local
artifex ghostscript An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal. CWE-22
Path Traversal
CVE-2024-46954 2024-11-14 10:58 2024-11-11 Show GitHub Exploit DB Packet Storm
249033 5.5 MEDIUM
Local
artifex
debian
suse
ghostscript
debian_linux
linux_enterprise_high_performance_computing
linux_enterprise_server
linux_enterprise_server_for_sap
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space. CWE-125
Out-of-bounds Read
CVE-2024-46955 2024-11-14 10:53 2024-11-11 Show GitHub Exploit DB Packet Storm
249034 6.1 MEDIUM
Network
theeventprime eventprime URL Redirection to Untrusted Site ('Open Redirect') vulnerability in EventPrime Events EventPrime.This issue affects EventPrime: from n/a through 4.0.4.5. CWE-601
Open Redirect
CVE-2024-47648 2024-11-14 10:53 2024-10-11 Show GitHub Exploit DB Packet Storm
249035 6.1 MEDIUM
Network
microsoft nugetgallery NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HT… CWE-79
Cross-site Scripting
CVE-2024-47604 2024-11-14 08:17 2024-10-2 Show GitHub Exploit DB Packet Storm
249036 7.5 HIGH
Network
siemens simatic_cp_1543-1_firmware A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50). Affected devices do not properly handle authorization. This could allow an unau… CWE-863
 Incorrect Authorization
CVE-2024-50310 2024-11-14 08:15 2024-11-12 Show GitHub Exploit DB Packet Storm
249037 7.3 HIGH
Local
siemens solid_edge_se2024 A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute… CWE-427
 Uncontrolled Search Path Element
CVE-2024-47942 2024-11-14 08:15 2024-11-12 Show GitHub Exploit DB Packet Storm
249038 7.8 HIGH
Local
siemens solid_edge_se2024 A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing… CWE-125
Out-of-bounds Read
CVE-2024-47941 2024-11-14 08:15 2024-11-12 Show GitHub Exploit DB Packet Storm
249039 7.8 HIGH
Local
siemens solid_edge_se2024 A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing… CWE-125
Out-of-bounds Read
CVE-2024-47940 2024-11-14 08:14 2024-11-12 Show GitHub Exploit DB Packet Storm
249040 6.5 MEDIUM
Local
siemens sinec_nms A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database function, that does not properly restrict the permissions of users to write to… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2024-47808 2024-11-14 08:14 2024-11-12 Show GitHub Exploit DB Packet Storm