Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239911 6.8 警告 digitalhive - DigitalHive の template/purpletech/base_include.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2415 2012-06-26 16:02 2008-05-22 Show GitHub Exploit DB Packet Storm
239912 4.3 警告 aguestbook - ANG の send_emai.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2414 2012-06-26 16:02 2008-05-22 Show GitHub Exploit DB Packet Storm
239913 7.5 危険 GForge Group - GForge の common/include/GroupJoinRequest.class における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2381 2012-06-26 16:02 2009-01-2 Show GitHub Exploit DB Packet Storm
239914 4.3 警告 acgv.free - ACGV News の glossaire.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2413 2012-06-26 16:02 2008-05-22 Show GitHub Exploit DB Packet Storm
239915 7.5 危険 acgv.free - ACGV News の glossaire.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2412 2012-06-26 16:02 2008-05-22 Show GitHub Exploit DB Packet Storm
239916 9.3 危険 Cerulean Studios - Cerulean Studios Trillian におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2409 2012-06-26 16:02 2008-05-23 Show GitHub Exploit DB Packet Storm
239917 9.3 危険 Cerulean Studios - Cerulean Studios Trillian Pro の talk.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2408 2012-06-26 16:02 2008-05-23 Show GitHub Exploit DB Packet Storm
239918 9.3 危険 Cerulean Studios - Cerulean Studios Trillian Pro の AIM.DLL におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2407 2012-06-26 16:02 2008-05-23 Show GitHub Exploit DB Packet Storm
239919 9.3 危険 Mozilla Foundation
fireftp		 - Firefox の FireFTP アドオンにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2399 2012-06-26 16:02 2008-05-22 Show GitHub Exploit DB Packet Storm
239920 4.3 警告 appserv open project - AppServ Open Project の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2398 2012-06-26 16:02 2008-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257291 - - - publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData - CVE-2024-42523 2024-08-24 03:35 2024-08-24 Show GitHub Exploit DB Packet Storm
257292 - - - A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attac… - CVE-2024-42915 2024-08-24 03:35 2024-08-24 Show GitHub Exploit DB Packet Storm
257293 - - - DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the actio… - CVE-2024-43027 2024-08-24 03:35 2024-08-22 Show GitHub Exploit DB Packet Storm
257294 7.5 HIGH
Network 		axios axios axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-39338 2024-08-24 03:35 2024-08-12 Show GitHub Exploit DB Packet Storm
257295 6.5 MEDIUM
Network 		siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware
ruggedcom_rm1224_lte\(4g\)_nam_firmware
scalance_m804pb_firmware
scalance_m826-2_shdsl-router_firmware
scalance_m874-2_firmware
scalance_m874-3_f… 		A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-41978 2024-08-24 03:34 2024-08-13 Show GitHub Exploit DB Packet Storm
257296 - - - autMan v2.9.6 allows attackers to bypass authentication via a crafted web request. - CVE-2024-43032 2024-08-24 03:15 2024-08-24 Show GitHub Exploit DB Packet Storm
257297 - - - autMan v2.9.6 was discovered to contain an access control issue. - CVE-2024-43031 2024-08-24 03:15 2024-08-24 Show GitHub Exploit DB Packet Storm
257298 7.5 HIGH
Network 		cisco spa_301_firmware
spa_303_firmware
spa_501g_firmware
spa_502g_firmware
spa_504g_firmware
spa_508g_firmware
spa_509g_firmware
spa_512g_firmware
spa_514g_firmware
spa_525g_fir… 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote … NVD-CWE-noinfo
CVE-2024-20451 2024-08-24 03:14 2024-08-8 Show GitHub Exploit DB Packet Storm
257299 9.8 CRITICAL
Network 		cisco spa_301_firmware
spa_303_firmware
spa_501g_firmware
spa_502g_firmware
spa_504g_firmware
spa_508g_firmware
spa_509g_firmware
spa_512g_firmware
spa_514g_firmware
spa_525g_fir… 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote … CWE-120
Classic Buffer Overflow 		CVE-2024-20450 2024-08-24 03:14 2024-08-8 Show GitHub Exploit DB Packet Storm
257300 9.8 CRITICAL
Network 		cisco spa_301_firmware
spa_303_firmware
spa_501g_firmware
spa_502g_firmware
spa_504g_firmware
spa_508g_firmware
spa_509g_firmware
spa_512g_firmware
spa_514g_firmware
spa_525g_fir… 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote … CWE-120
Classic Buffer Overflow 		CVE-2024-20454 2024-08-24 03:13 2024-08-8 Show GitHub Exploit DB Packet Storm