Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239551 4.3 警告 avantbrowser - Avant Browser の JavaScript エンジンにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-4166 2012-06-26 16:02 2008-09-22 Show GitHub Exploit DB Packet Storm
239552 6.8 警告 assetman - Assetman の search_inv.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4161 2012-06-26 16:02 2008-09-22 Show GitHub Exploit DB Packet Storm
239553 6.8 警告 customcms - CCMS Gaming Portal の print.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4156 2012-06-26 16:02 2008-09-19 Show GitHub Exploit DB Packet Storm
239554 7.8 危険 easybrik - EasySite におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4155 2012-06-26 16:02 2008-09-19 Show GitHub Exploit DB Packet Storm
239555 5 警告 cyask - CYASK の collect.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4151 2012-06-26 16:02 2008-09-24 Show GitHub Exploit DB Packet Storm
239556 7.5 危険 dieselscripts - Diesel Joke Site の picture_category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4150 2012-06-26 16:02 2008-09-24 Show GitHub Exploit DB Packet Storm
239557 5 警告 addalink - Addalink における visit-counter の値を変更される脆弱性 CWE-287
不適切な認証 		CVE-2008-4146 2012-06-26 16:02 2008-09-24 Show GitHub Exploit DB Packet Storm
239558 6.8 警告 addalink - Addalink の user_read_links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4145 2012-06-26 16:02 2008-09-24 Show GitHub Exploit DB Packet Storm
239559 7.5 危険 discountedscripts - ACG-ScriptShop E-Gold Script Shop の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4144 2012-06-26 16:02 2008-09-24 Show GitHub Exploit DB Packet Storm
239560 7.5 危険 ephpscripts - E-Php CMS の article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4142 2012-06-26 16:02 2008-09-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255651 - - - A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_area.php. The… CWE-89
SQL Injection 		CVE-2024-8344 2024-09-3 21:59 2024-08-31 Show GitHub Exploit DB Packet Storm
255652 - - - A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. - CVE-2024-44918 2024-09-3 21:59 2024-08-31 Show GitHub Exploit DB Packet Storm
255653 - - - Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command executio… - CVE-2024-44916 2024-09-3 21:59 2024-08-31 Show GitHub Exploit DB Packet Storm
255654 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID. ConsultIDs: CVE-2024-39771. Reason: This CVE ID is a reservation duplicate of CVE-2024-39771. Notes: All CVE users should reference CVE-2024-3977… - CVE-2024-41718 2024-09-3 20:15 2024-09-3 Show GitHub Exploit DB Packet Storm
255655 5.5 MEDIUM
Local 		- - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2022-48936 2024-08-31 15:15 2024-08-22 Show GitHub Exploit DB Packet Storm
255656 6.6 MEDIUM
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. NVD-CWE-noinfo
CVE-2024-25562 2024-08-31 12:40 2024-08-14 Show GitHub Exploit DB Packet Storm
255657 3.3 LOW
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. NVD-CWE-noinfo
CVE-2024-24973 2024-08-31 12:39 2024-08-14 Show GitHub Exploit DB Packet Storm
255658 7.8 HIGH
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-276
Incorrect Default Permissions  		CVE-2024-23495 2024-08-31 12:38 2024-08-14 Show GitHub Exploit DB Packet Storm
255659 7.3 HIGH
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-23491 2024-08-31 12:37 2024-08-14 Show GitHub Exploit DB Packet Storm
255660 5.4 MEDIUM
Network 		yzncms yzncms A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the config… CWE-79
Cross-site Scripting 		CVE-2024-42939 2024-08-31 11:58 2024-08-21 Show GitHub Exploit DB Packet Storm