Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
239571	10	危険	flip4mac	-	Flip4Mac WMV の Importer における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2008-4095	2012-06-26 16:02	2008-09-16	Show	GitHub Exploit DB Packet Storm

239572	7.5	危険	couponscript	-	PHP Coupon Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4090	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

239573	6.8	警告	acoustica	-	Acoustica Beatcraft におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4087	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

239574	3.5	注意	brim-project	-	Brim の Bookmarks プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4083	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

239575	4.6	警告	brim-project	-	Brim の Tasks プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4082	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

239576	6.5	警告	LedgerSMB dws systems inc. sql-ledger	-	LSMB などにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4078	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

239577	7.8	危険	LedgerSMB dws systems inc. sql-ledger	-	LSMB の CGI スクリプトにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-4077	2012-06-26 16:02	2008-08-26	Show	GitHub Exploit DB Packet Storm

239578	6.8	警告	Dino	-	D-iscussion Board の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4075	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

239579	5	警告	マイクロソフトアドビシステムズ	-	Adobe Acrobat の特定の ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-4071	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

239580	4.3	警告	XOOPS 有限会社ブルームーン	-	XOOPS 用の Bluemoon PopnupBLOG モジュールの index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4053	2012-06-26 16:02	2008-09-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256221	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete	CWE-352 Origin Validation Error	CVE-2024-42611	2024-08-21 22:11	2024-08-21	Show	GitHub Exploit DB Packet Storm

256222	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files	CWE-352 Origin Validation Error	CVE-2024-42610	2024-08-21 22:11	2024-08-21	Show	GitHub Exploit DB Packet Storm

256223	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics	CWE-352 Origin Validation Error	CVE-2024-42616	2024-08-21 22:10	2024-08-21	Show	GitHub Exploit DB Packet Storm

256224	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma	CWE-352 Origin Validation Error	CVE-2024-42618	2024-08-21 22:09	2024-08-21	Show	GitHub Exploit DB Packet Storm

256225	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32	CWE-352 Origin Validation Error	CVE-2024-42617	2024-08-21 22:09	2024-08-21	Show	GitHub Exploit DB Packet Storm

256226	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php	CWE-352 Origin Validation Error	CVE-2024-42621	2024-08-21 21:50	2024-08-21	Show	GitHub Exploit DB Packet Storm

256227	7.5	HIGH Network	floraison	fugit	fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to p…	NVD-CWE-noinfo	CVE-2024-43380	2024-08-21 21:38	2024-08-20	Show	GitHub Exploit DB Packet Storm

256228	3.1	LOW Network	trufflesecurity	trufflehog	TruffleHog is a secrets scanning tool. Prior to v3.81.9, this vulnerability allows a malicious actor to craft data in a way that, when scanned by specific detectors, could trigger the detector to mak…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-43379	2024-08-21 21:37	2024-08-20	Show	GitHub Exploit DB Packet Storm

256229	9.8	CRITICAL Network	jielink\+_jsotc2016_project	jielink\+_jsotc2016	A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionali…	NVD-CWE-Other	CVE-2024-7921	2024-08-21 21:34	2024-08-19	Show	GitHub Exploit DB Packet Storm

256230	9.8	CRITICAL Network	microcks	microcks	In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.	NVD-CWE-noinfo	CVE-2024-44076	2024-08-21 21:33	2024-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed