Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239271 9.3 危険 ESET
マイクロソフト
- ESET Smart Security における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5527 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
239272 9.3 危険 マイクロソフト
Doctor Web
- DrWeb Anti-virus における HTML 文書のマルウェアの検知が回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5526 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
239273 9.3 危険 マイクロソフト
ClamAV
- ClamAV における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5525 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
239274 9.3 危険 マイクロソフト
AVAST Software s.r.o.
- avast! antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5523 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
239275 9.3 危険 マイクロソフト
AVG Technologies
- AVG Anti-Virus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5522 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
239276 9.3 危険 マイクロソフト
free-av
- Avira AntiVir における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5521 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
239277 9.4 危険 マイクロソフト
Apache Software Foundation
- Apache Geronimo Application Server の Web 管理コンソールにおけるファイルを任意のディレクトリにアップロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5518 2012-06-26 16:03 2009-04-17 Show GitHub Exploit DB Packet Storm
239278 7.5 危険 Git project - gitweb の Web インターフェースにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-5517 2012-06-26 16:03 2009-01-13 Show GitHub Exploit DB Packet Storm
239279 9.3 危険 マイクロソフト
アンラボ
- AhnLab V3 における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5520 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
239280 7.5 危険 bandsitecms - BandSite CMS における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-5497 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255561 8.8 HIGH
Network
wpmudev hummingbird Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Hummingbird.This issue affects Hummingbird: from n/a through 3.9.1. CWE-352
 Origin Validation Error
CVE-2024-43117 2024-09-19 01:15 2024-08-27 Show GitHub Exploit DB Packet Storm
255562 8.8 HIGH
Network
loftware spectrum Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks. CWE-611
XXE
CVE-2023-37233 2024-09-19 01:10 2024-09-11 Show GitHub Exploit DB Packet Storm
255563 7.5 HIGH
Network
sharedfilespro shared_files Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Shared Files – File Upload Form Shared Files.This issue affects Shared Files: from n/a through 1.7.28. NVD-CWE-noinfo
CVE-2024-43230 2024-09-19 01:10 2024-08-27 Show GitHub Exploit DB Packet Storm
255564 9.8 CRITICAL
Network
loftware spectrum Loftware Spectrum through 4.6 has unprotected JMX Registry. NVD-CWE-noinfo
CVE-2023-37234 2024-09-19 01:05 2024-09-11 Show GitHub Exploit DB Packet Storm
255565 7.5 HIGH
Network
loftware spectrum Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor. NVD-CWE-noinfo
CVE-2023-37232 2024-09-19 00:55 2024-09-11 Show GitHub Exploit DB Packet Storm
255566 8.8 HIGH
Network
inspireui mstore_api The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_profile() function i… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8242 2024-09-19 00:47 2024-09-14 Show GitHub Exploit DB Packet Storm
255567 9.1 CRITICAL
Network
siemens simatic_rf360r_firmware
simatic_rf1170r_firmware
simatic_rf1140r_firmware
simatic_reader_rf685r_fcc_firmware
simatic_reader_rf685r_etsi_firmware
simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF… NVD-CWE-noinfo
CVE-2024-37995 2024-09-19 00:37 2024-09-10 Show GitHub Exploit DB Packet Storm
255568 7.1 HIGH
Network
siemens simatic_rf360r_firmware
simatic_rf1170r_firmware
simatic_rf1140r_firmware
simatic_reader_rf685r_fcc_firmware
simatic_reader_rf685r_etsi_firmware
simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF… NVD-CWE-Other
CVE-2024-37994 2024-09-19 00:35 2024-09-10 Show GitHub Exploit DB Packet Storm
255569 4.8 MEDIUM
Network
classcms classcms A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handle… CWE-79
Cross-site Scripting
CVE-2024-8145 2024-09-19 00:34 2024-08-25 Show GitHub Exploit DB Packet Storm
255570 7.5 HIGH
Network
siemens simatic_rf360r_firmware
simatic_rf1170r_firmware
simatic_rf1140r_firmware
simatic_reader_rf685r_fcc_firmware
simatic_reader_rf685r_etsi_firmware
simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF… NVD-CWE-noinfo
CVE-2024-37993 2024-09-19 00:32 2024-09-10 Show GitHub Exploit DB Packet Storm