Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228871 4.3 警告 National Information Infrastructure Development Institute - Drupal 用 Shibboleth authentication モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4494 2012-11-2 14:55 2012-08-8 Show GitHub Exploit DB Packet Storm
228872 2.1 注意 Isaac Sukin - Drupal 用 Shorten URLs モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4492 2012-11-2 14:54 2012-08-8 Show GitHub Exploit DB Packet Storm
228873 5.8 警告 Earl Dunovant - Drupal 用 Monthly Archive by Node Type モジュールにおける制限しているノードにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4491 2012-11-2 14:53 2012-08-1 Show GitHub Exploit DB Packet Storm
228874 4.3 警告 Ricky Morse - Drupal 用 Excluded Users モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4490 2012-11-2 14:45 2012-08-1 Show GitHub Exploit DB Packet Storm
228875 5.8 警告 Mark Burdett - Drupal 用 Secure Login モジュールにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-4489 2012-11-2 14:43 2012-07-25 Show GitHub Exploit DB Packet Storm
228876 5 警告 Location module project - Drupal 用 Location モジュールにおけるノードまたはユーザの検索結果を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4488 2012-11-2 14:43 2012-07-25 Show GitHub Exploit DB Packet Storm
228877 4.3 警告 Manuel Garcia - Drupal 用 Gallery formatter モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4485 2012-11-2 14:40 2012-07-25 Show GitHub Exploit DB Packet Storm
228878 4.3 警告 Campaign Monitor project - Drupal 用 Campaign Monitor モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4484 2012-11-2 14:38 2012-07-18 Show GitHub Exploit DB Packet Storm
228879 5 警告 Acquia Inc. - Drupal 用 Drupal Commons モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4483 2012-11-2 14:38 2012-07-11 Show GitHub Exploit DB Packet Storm
228880 5 警告 Longwave Consulting - Drupal 用 Ubercart SecureTrading Payment Method モジュールにおける未払いのアイテムを購入される脆弱性 CWE-20
不適切な入力確認
CVE-2012-4482 2012-11-2 14:36 2012-07-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249051 8.8 HIGH
Network
ultrapress unseen_blog The Unseen Blog theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input. This makes it possible for authenticated … CWE-502
 Deserialization of Untrusted Data
CVE-2024-7432 2024-11-14 07:03 2024-10-1 Show GitHub Exploit DB Packet Storm
249052 3.7 LOW
Network
netadmin netadmin_iam A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUser… CWE-203
 Information Exposure Through Discrepancy
CVE-2024-9513 2024-11-14 06:57 2024-10-4 Show GitHub Exploit DB Packet Storm
249053 9.8 CRITICAL
Network
ruijie rg-nbs2009g-p_firmware An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm. NVD-CWE-noinfo
CVE-2024-24116 2024-11-14 06:43 2024-10-3 Show GitHub Exploit DB Packet Storm
249054 - - - wasm3 139076a is vulnerable to Denial of Service (DoS). - CVE-2024-27527 2024-11-14 06:35 2024-11-9 Show GitHub Exploit DB Packet Storm
249055 8.1 HIGH
Network
parseplatform parse_server Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. If the Parse Server option allowCustomObjectId: true is set, an attacker that is allowed to cre… CWE-863
 Incorrect Authorization
CVE-2024-47183 2024-11-14 06:15 2024-10-5 Show GitHub Exploit DB Packet Storm
249056 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key() trie_get_next_key() allocates a node stack with size trie->max_prefixlen, whi… CWE-787
 Out-of-bounds Write
CVE-2024-50262 2024-11-14 06:10 2024-11-9 Show GitHub Exploit DB Packet Storm
249057 9.8 CRITICAL
Network
dlink di-8003_firmware A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argume… CWE-78
CWE-77
OS Command 
Command Injection
CVE-2024-11046 2024-11-14 06:01 2024-11-10 Show GitHub Exploit DB Packet Storm
249058 9.8 CRITICAL
Network
dlink di-8003_firmware A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipu… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2024-11047 2024-11-14 05:56 2024-11-10 Show GitHub Exploit DB Packet Storm
249059 9.8 CRITICAL
Network
dlink di-8003_firmware A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str le… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2024-11048 2024-11-14 05:53 2024-11-10 Show GitHub Exploit DB Packet Storm
249060 5.4 MEDIUM
Network
cleversoft clever_addons_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CleverSoft Clever Addons for Elementor allows Stored XSS.This issue affects Clever Addons … CWE-79
Cross-site Scripting
CVE-2024-51580 2024-11-14 05:50 2024-11-10 Show GitHub Exploit DB Packet Storm