Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
238911	4.3	警告	DNN	-	DotNetNuke の Language skin オブジェクトにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6732	2012-06-26 16:10	2008-06-11	Show	GitHub Exploit DB Packet Storm

238912	9	危険	アバイア	-	Avaya Communication Manager の Web 管理インターフェースにおける任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2008-6711	2012-06-26 16:10	2008-06-25	Show	GitHub Exploit DB Packet Storm

238913	9	危険	アバイア	-	Avaya Communication Manager の Web 管理インターフェースにおける root 権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2008-6710	2012-06-26 16:10	2008-06-25	Show	GitHub Exploit DB Packet Storm

238914	4.3	警告	butterflymedia	-	Butterfly Organizer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6700	2012-06-26 16:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

238915	7.5	危険	frank naegler TYPO3 Association	-	TYPO3 の timtab_sociable における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6695	2012-06-26 16:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

238916	4.3	警告	david cadu TYPO3 Association	-	TYPO3 の dcdgooglemap におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6687	2012-06-26 16:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

238917	4.3	警告	The Dojo Foundation	-	Dojo の dijit.Editor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6681	2012-06-26 16:10	2009-04-9	Show	GitHub Exploit DB Packet Storm

238918	7.5	危険	dirk bartley	-	nweb2fax の viewrq.php における任意のコードを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2008-6669	2012-06-26 16:10	2009-04-8	Show	GitHub Exploit DB Packet Storm

238919	5	警告	dirk bartley	-	nweb2fax におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6668	2012-06-26 16:10	2009-04-8	Show	GitHub Exploit DB Packet Storm

238920	6.8	警告	anantasoft	-	Ananta CMS の change.php における管理者の権限を取得される脆弱性	CWE-94 コード・インジェクション	CVE-2008-6665	2012-06-26 16:10	2009-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256431	7.5	HIGH Network	f5	big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_acceleration_manager big-ip_application_secur…	In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization. …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-41727	2024-08-21 04:25	2024-08-15	Show	GitHub Exploit DB Packet Storm

256432	5.5	MEDIUM Local	xpdfreader	xpdf	In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.	CWE-674 Uncontrolled Recursion	CVE-2024-7866	2024-08-21 04:23	2024-08-16	Show	GitHub Exploit DB Packet Storm

256433	9.8	CRITICAL Network	kevinwong	online_food_ordering_system	A vulnerability was found in itsourcecode Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /addcategory.php. The manipu…	CWE-89 SQL Injection	CVE-2024-7838	2024-08-21 04:16	2024-08-16	Show	GitHub Exploit DB Packet Storm

256434	7.5	HIGH Network	celsiusbenelux	comfortkey	A Local File Inclusion vulnerability has been found in ComfortKey, a product of Celsius Benelux. Using this vulnerability, an unauthenticated attacker may retrieve sensitive information about the und…	CWE-22 Path Traversal	CVE-2024-27120	2024-08-21 04:08	2024-08-15	Show	GitHub Exploit DB Packet Storm

256435	8.8	HIGH Network	rems	task_progress_tracker	A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of t…	CWE-89 SQL Injection	CVE-2024-7792	2024-08-21 04:08	2024-08-15	Show	GitHub Exploit DB Packet Storm

256436	-		-	-	Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.	-	CVE-2024-33872	2024-08-21 03:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

256437	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid…	-	CVE-2023-1673	2024-08-21 03:15	2024-08-21	Show	GitHub Exploit DB Packet Storm

256438	8.8	HIGH Network	zte	zxv10_et301_firmware zxv10_xt802_firmware	There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator il…	NVD-CWE-noinfo	CVE-2024-22069	2024-08-21 02:22	2024-08-8	Show	GitHub Exploit DB Packet Storm

256439	9.8	CRITICAL Network	vonets	var1200-h_firmware var1200-l_firmware var600-h_firmware vap11ac_firmware vap11g-500s_firmware vbg1200_firmware vap11s-5g_firmware vap11s_firmware var11n-300_firmware vap11g…	Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote …	CWE-787 Out-of-bounds Write	CVE-2024-39791	2024-08-21 02:15	2024-08-12	Show	GitHub Exploit DB Packet Storm

256440	7.1	HIGH Local	dell	bsafe_micro-edition-suite bsafe_crypto-c-micro-edition	Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated atta…	CWE-125 Out-of-bounds Read	CVE-2023-28074	2024-08-21 02:15	2024-07-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed