Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238501 4.3 警告 Drupal - vbDrupal で使用される Drupal における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-1576 2012-06-26 16:10 2009-04-29 Show GitHub Exploit DB Packet Storm
238502 4.6 警告 Debian
Canonical
branden robinson
レッドハット		 - Debian GNU/Linux などの製品で使用される xvfb-run における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1573 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238503 6.8 警告 シスコシステムズ - Cisco Linksys WRT54GC ルータの administration.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-1561 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238504 7.8 危険 シスコシステムズ - Cisco Linksys WVC54GCA ワイアレスビデオカメラにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2009-1560 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238505 7.8 危険 シスコシステムズ - Cisco Linksys WVC54GCA ワイアレスビデオカメラ上の adm/file.cgi における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1559 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238506 7.8 危険 シスコシステムズ - Cisco Linksys WVC54GCA ワイアレスビデオカメラの adm/file.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1558 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238507 4.3 警告 シスコシステムズ - Cisco Linksys WVC54GCA ワイアレスビデオカメラにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1557 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238508 3.5 注意 シスコシステムズ - Cisco Linksys WVC54GCA ワイアレスビデオカメラの img/main.cgi における img/ 配下の任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-1556 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238509 5 警告 シスコシステムズ - Cisco Linksys WVC54GCA ワイアレスビデオカメラにおけるパスワードなどの重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-1555 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
238510 7.5 危険 agtc - AGTC MyShop における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1549 2012-06-26 16:10 2009-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256811 7.5 HIGH
Network 		tenda fh1201_firmware Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS… CWE-787
 Out-of-bounds Write 		CVE-2024-42940 2024-09-4 04:35 2024-08-16 Show GitHub Exploit DB Packet Storm
256812 5.4 MEDIUM
Network 		mayurik best_house_rental_management_system A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via… CWE-79
Cross-site Scripting 		CVE-2024-40473 2024-09-4 04:35 2024-08-12 Show GitHub Exploit DB Packet Storm
256813 6.1 MEDIUM
Network 		lopalopa responsive_school_management_system A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary … CWE-79
Cross-site Scripting 		CVE-2024-41241 2024-09-4 04:35 2024-08-8 Show GitHub Exploit DB Packet Storm
256814 7.5 HIGH
Network 		hms-networks ewon_cosy\+_firmware Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in vers… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2024-33892 2024-09-4 04:18 2024-08-3 Show GitHub Exploit DB Packet Storm
256815 7.2 HIGH
Network 		hms-networks ewon_cosy\+_firmware Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s… CWE-78
OS Command  		CVE-2024-33896 2024-09-4 04:02 2024-08-3 Show GitHub Exploit DB Packet Storm
256816 6.6 MEDIUM
Physics 		hms-networks ewon_cosy\+_firmware Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is n… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-33895 2024-09-4 04:02 2024-08-3 Show GitHub Exploit DB Packet Storm
256817 9.8 CRITICAL
Network 		arajajyothibabu school_management_system School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php. CWE-89
SQL Injection 		CVE-2024-42568 2024-09-4 03:35 2024-08-20 Show GitHub Exploit DB Packet Storm
256818 7.5 HIGH
Network 		tenda fh1206_firmware Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the modino parameter in the fromPptpUserAdd function. This vulnerability allows attackers to cause a Denial of Service (DoS) v… CWE-787
 Out-of-bounds Write 		CVE-2024-42987 2024-09-4 03:35 2024-08-16 Show GitHub Exploit DB Packet Storm
256819 9.8 CRITICAL
Network 		tenda fh1206_firmware An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request. NVD-CWE-noinfo
CVE-2024-42978 2024-09-4 03:35 2024-08-16 Show GitHub Exploit DB Packet Storm
256820 7.5 HIGH
Network 		tenda fh1201_firmware Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (… CWE-787
 Out-of-bounds Write 		CVE-2024-42948 2024-09-4 03:35 2024-08-16 Show GitHub Exploit DB Packet Storm