Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240101 6.8 警告 AVAST Software s.r.o. - avast! Home and Professional の aavmker4.sys における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1625 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
240102 6.8 警告 geertsen holdings inc - GeeCarts における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1622 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
240103 4.3 警告 geertsen holdings inc - GeeCarts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1621 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
240104 7.5 危険 2X Software - 2X ThinClientServer の 2X TFTP サービスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1620 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
240105 7.5 危険 clever copy - Clever Copy の postview.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1608 2012-06-26 16:02 2008-04-1 Show GitHub Exploit DB Packet Storm
240106 6 警告 elastic path - EP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1606 2012-06-26 16:02 2008-04-1 Show GitHub Exploit DB Packet Storm
240107 7.5 危険 comix - comix における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1568 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
240108 4.3 警告 digiappz - Digiappz DigiDomain におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1560 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
240109 6.8 警告 Joomla!
bernard gilly		 - Joomla! の Bernard Gilly alphacontent コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1559 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
240110 5 警告 bolinos - BolinOS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-1557 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256541 7.8 HIGH
Local 		adobe bridge Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this … CWE-787
 Out-of-bounds Write 		CVE-2024-41840 2024-08-20 03:54 2024-08-15 Show GitHub Exploit DB Packet Storm
256542 9.8 CRITICAL
Network 		totolink x6000r_firmware A vulnerability, which was classified as critical, has been found in TOTOLINK X6000R 9.4.0cu.852_20230719. This issue affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. The manipulat… CWE-77
Command Injection 		CVE-2024-7907 2024-08-20 03:53 2024-08-19 Show GitHub Exploit DB Packet Storm
256543 5.5 MEDIUM
Local 		adobe bridge Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypa… CWE-125
Out-of-bounds Read 		CVE-2024-39387 2024-08-20 03:53 2024-08-15 Show GitHub Exploit DB Packet Storm
256544 7.8 HIGH
Local 		adobe bridge Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this … CWE-787
 Out-of-bounds Write 		CVE-2024-39386 2024-08-20 03:53 2024-08-15 Show GitHub Exploit DB Packet Storm
256545 9.8 CRITICAL
Network 		totolink ex1200l_firmware A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected is the function setDefResponse of the file /www/cgi-bin/cstecgi.cgi. The manipulation … CWE-787
 Out-of-bounds Write 		CVE-2024-7908 2024-08-20 03:51 2024-08-19 Show GitHub Exploit DB Packet Storm
256546 7.2 HIGH
Network 		online_railway_reservation_system_project online_railway_reservation_system A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7910 2024-08-20 03:49 2024-08-19 Show GitHub Exploit DB Packet Storm
256547 9.8 CRITICAL
Network 		oretnom23 simple_online_bidding_system A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /simple-online-bidding-system/bidding/index.… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2024-7911 2024-08-20 03:48 2024-08-19 Show GitHub Exploit DB Packet Storm
256548 6.1 MEDIUM
Network 		pylonsproject webob WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected… CWE-601
Open Redirect 		CVE-2024-42353 2024-08-20 03:44 2024-08-15 Show GitHub Exploit DB Packet Storm
256549 5.5 MEDIUM
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit th… CWE-476
 NULL Pointer Dereference 		CVE-2024-41866 2024-08-20 03:44 2024-08-15 Show GitHub Exploit DB Packet Storm
256550 7.8 HIGH
Local 		adobe dimension Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a m… CWE-426
 Untrusted Search Path 		CVE-2024-41865 2024-08-20 03:44 2024-08-15 Show GitHub Exploit DB Packet Storm