Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240201 4.3 警告 craftysyntax - CSLH におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1183 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240202 4.3 警告 Electric Sheep Fencing - BSD Perimeter pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1182 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240203 4.3 警告 Centreon - Centreon の include/common/javascript/color_picker.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1179 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240204 4.3 警告 Centreon - Centreon の include/doc/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1178 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240205 7.5 危険 affiliate market - Affiliate Market の shop/detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1177 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240206 9.3 危険 danskebank - Danske Bank e-Sec Control Module ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1107 2012-06-26 15:55 2009-04-16 Show GitHub Exploit DB Packet Storm
240207 2.6 注意 affiliate market - Affiliate Market の function/sideblock.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1176 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240208 4.3 警告 flicks software - AuthentiX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1175 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240209 4.3 警告 flicks software - AuthentiX の editUser.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1174 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
240210 5 警告 Flyspray - Flyspray におけるユーザ名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2008-1166 2012-06-26 15:55 2008-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256081 4.8 MEDIUM
Network
imagely nextgen_gallery Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Imagely NextGEN Gallery allows Stored XSS.This issue affects NextGEN Gallery: from n/a thr… CWE-79
Cross-site Scripting
CVE-2024-39627 2024-09-12 02:35 2024-08-2 Show GitHub Exploit DB Packet Storm
256082 8.8 HIGH
Network
nvidia mellanox_os
onyx
skyway
metrox-3_xc
metrox-2
NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of thi… CWE-22
Path Traversal
CVE-2024-0113 2024-09-12 02:34 2024-08-12 Show GitHub Exploit DB Packet Storm
256083 6.1 MEDIUM
Network
contest-gallery contest_gallery Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Contest Gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 23.… CWE-79
Cross-site Scripting
CVE-2024-39631 2024-09-12 02:34 2024-08-2 Show GitHub Exploit DB Packet Storm
256084 6.1 MEDIUM
Network
metagauss registrationmagic Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RegistrationMagic Forms RegistrationMagic allows Stored XSS.This issue affects Registratio… CWE-79
Cross-site Scripting
CVE-2024-39643 2024-09-12 02:33 2024-08-2 Show GitHub Exploit DB Packet Storm
256085 6.1 MEDIUM
Network
kunalnagar custom_404_pro Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kunal Nagar Custom 404 Pro allows Reflected XSS.This issue affects Custom 404 Pro: from n/… CWE-79
Cross-site Scripting
CVE-2024-39646 2024-09-12 02:31 2024-08-2 Show GitHub Exploit DB Packet Storm
256086 5.4 MEDIUM
Network
modernaweb black_widgets_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black W… CWE-79
Cross-site Scripting
CVE-2024-39644 2024-09-12 02:31 2024-08-2 Show GitHub Exploit DB Packet Storm
256087 6.1 MEDIUM
Network
kofimokome message_filter_for_contact_form_7 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 allows Reflected XSS.This issue affects Mess… CWE-79
Cross-site Scripting
CVE-2024-39647 2024-09-12 02:30 2024-08-2 Show GitHub Exploit DB Packet Storm
256088 6.1 MEDIUM
Local
nvidia cv-cuda NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python p… NVD-CWE-noinfo
CVE-2024-0115 2024-09-12 02:24 2024-08-12 Show GitHub Exploit DB Packet Storm
256089 6.5 MEDIUM
Network
gitlab gitlab A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon import… NVD-CWE-noinfo
CVE-2024-8041 2024-09-12 01:54 2024-08-23 Show GitHub Exploit DB Packet Storm
256090 6.4 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipel… CWE-77
Command Injection
CVE-2024-7110 2024-09-12 01:52 2024-08-23 Show GitHub Exploit DB Packet Storm