Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238801 4.3 警告 gelatocms - Gelato CMS の admin/comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7039 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
238802 4.3 警告 bcoos - bcoos の DevTracker のモジュールの index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7036 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
238803 7.5 危険 galore
Joomla!		 - Joomla! 用 Simple Shop Galore コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7033 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
238804 6.8 警告 F5 Networks - F5 BIG-IP の Web 管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-7032 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
238805 10 危険 Foxit Software Inc - Foxit Remote Access Server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-7031 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
238806 6 警告 alilg - AlilG Application AliBoard Beta の usercp.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7029 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
238807 7.5 危険 aves - RPG.Board における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7028 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
238808 6.8 警告 eFront Learning - eFront の filesystem3.class.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7026 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
238809 4.3 警告 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point ZoneAlarm の TrueVector におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-7025 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
238810 6.8 警告 arzdev - Arz Development The Gemini Portal の admin.php における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7024 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256981 9.8 CRITICAL
Network 		oretnom23 yoga_class_registration_system A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the co… NVD-CWE-noinfo
CVE-2024-7851 2024-08-30 00:22 2024-08-16 Show GitHub Exploit DB Packet Storm
256982 5.4 MEDIUM
Network 		fiware keyrock Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link. CWE-330
 Use of Insufficiently Random Values 		CVE-2024-42165 2024-08-30 00:21 2024-08-12 Show GitHub Exploit DB Packet Storm
256983 4.3 MEDIUM
Network 		fiware keyrock Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two factor authorization of any user by predicting the token for the disable_2fa l… CWE-330
 Use of Insufficiently Random Values 		CVE-2024-42164 2024-08-30 00:19 2024-08-12 Show GitHub Exploit DB Packet Storm
256984 8.1 HIGH
Network 		fiware keyrock Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link. CWE-326
Inadequate Encryption Strength 		CVE-2024-42163 2024-08-30 00:17 2024-08-12 Show GitHub Exploit DB Packet Storm
256985 9.8 CRITICAL
Network 		oretnom23 music_gallery_site A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file /admin/?page=musics/manage_music. The manipulation of the argu… CWE-89
SQL Injection 		CVE-2024-8222 2024-08-30 00:13 2024-08-28 Show GitHub Exploit DB Packet Storm
256986 9.8 CRITICAL
Network 		oretnom23 music_gallery_site A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. This vulnerability affects unknown code of the file /classes/Master.php?f=delete_category. The manipulation … CWE-89
SQL Injection 		CVE-2024-8223 2024-08-30 00:11 2024-08-28 Show GitHub Exploit DB Packet Storm
256987 9.8 CRITICAL
Network 		angeljudesuarez tailoring_management_system A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file staffedit.php. The … CWE-89
SQL Injection 		CVE-2024-8220 2024-08-29 23:49 2024-08-28 Show GitHub Exploit DB Packet Storm
256988 9.0 CRITICAL
Network 		microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-843
Type Confusion 		CVE-2024-38219 2024-08-29 23:45 2024-08-12 Show GitHub Exploit DB Packet Storm
256989 5.4 MEDIUM
Network 		ibm aspera_shares IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574. CWE-384
 Session Fixation 		CVE-2023-38018 2024-08-29 23:36 2024-08-12 Show GitHub Exploit DB Packet Storm
256990 7.2 HIGH
Network 		abinitio authorization_gateway
metadata_hub 		An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration. CWE-94
Code Injection 		CVE-2024-37382 2024-08-29 23:29 2024-08-9 Show GitHub Exploit DB Packet Storm