Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238561 4.3 警告 シスコシステムズ - Cisco SESM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1287 2012-06-26 16:10 2009-04-13 Show GitHub Exploit DB Packet Storm
238562 5 警告 bibtex - BibTeX におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1284 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
238563 10 危険 Debian - apt の apt-get における悪意のあるリポジトリをインストールされる脆弱性 CWE-DesignError
CVE-2009-1358 2012-06-26 16:10 2007-07-14 Show GitHub Exploit DB Packet Storm
238564 6.8 警告 glFusion - glFusion における権限を取得される脆弱性 CWE-310
暗号の問題 		CVE-2009-1283 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
238565 7.5 危険 glFusion - glFusion の private/system/lib-session.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1282 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
238566 4.3 警告 glFusion - glFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1281 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
238567 7.5 危険 gravityboardx - GBX の forms/ajax/configure.php における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1278 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
238568 7.5 危険 gravityboardx - GBX の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1277 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
238569 6.8 警告 Apache Software Foundation - Apache Struts などで使用される Apache Tiles における重要情報を取得される脆弱性 CWE-Other
その他 		CVE-2009-1275 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
238570 5 警告 andrew j.korty - USE=ssh でコンパイルされた PAM で使用される pam_ssh におけるユーザ名が列挙される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-1273 2012-06-26 16:10 2009-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256311 - - - A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been classified as critical. Affected is the function setIpPortFilterRules of the file /cgi-b… - CVE-2024-8576 2024-09-9 22:03 2024-09-9 Show GitHub Exploit DB Packet Storm
256312 - - - A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This issue affects the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation… CWE-120
Classic Buffer Overflow 		CVE-2024-8575 2024-09-9 22:03 2024-09-9 Show GitHub Exploit DB Packet Storm
256313 - - - A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This vulnerability affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The m… CWE-78
OS Command  		CVE-2024-8574 2024-09-9 22:03 2024-09-8 Show GitHub Exploit DB Packet Storm
256314 - - - An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to those of the service account. - CVE-2024-39718 2024-09-9 22:03 2024-09-8 Show GitHub Exploit DB Packet Storm
256315 - - - Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - https://people.redhat.co… - CVE-2023-46809 2024-09-9 22:03 2024-09-8 Show GitHub Exploit DB Packet Storm
256316 6.6 MEDIUM
Network 		- - The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the '_import' function in all versions up to, and including, 0.9.7. Th… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7620 2024-09-9 22:03 2024-09-7 Show GitHub Exploit DB Packet Storm
256317 - - - A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the function formatData of the file /admin.php?m=Acquisi&a=testcj&lid=1 of the component SQL Comman… CWE-94
Code Injection 		CVE-2024-8523 2024-09-9 22:03 2024-09-7 Show GitHub Exploit DB Packet Storm
256318 - - - A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index of the file /qso of the component Live QSO. The manipulation of the argument man… CWE-79
Cross-site Scripting 		CVE-2024-8521 2024-09-9 22:03 2024-09-7 Show GitHub Exploit DB Packet Storm
256319 - - - An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affe… - CVE-2024-7652 2024-09-9 22:03 2024-09-7 Show GitHub Exploit DB Packet Storm
256320 7.8 HIGH
Local 		openatom openharmony in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free. CWE-416
 Use After Free 		CVE-2024-41160 2024-09-9 21:21 2024-09-2 Show GitHub Exploit DB Packet Storm