Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240371 7.5 危険 boastmachine - boastMachine の mail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0422 2012-06-26 15:55 2008-01-23 Show GitHub Exploit DB Packet Storm
240372 5.5 警告 Belkin International - Belkin Wireless G Plus MIMO Router F5D9230-4 の Web サーバにおける設定を変更される脆弱性 CWE-287
不適切な認証
CVE-2008-0403 2012-06-26 15:55 2008-01-23 Show GitHub Exploit DB Packet Storm
240373 4.3 警告 aflog - aflog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0398 2012-06-26 15:55 2008-01-23 Show GitHub Exploit DB Packet Storm
240374 6.8 警告 aflog - aflog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0397 2012-06-26 15:55 2008-01-23 Show GitHub Exploit DB Packet Storm
240375 7.8 危険 BitDefender - 複数の BitDefender 製品で使用される BitDefender Update Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0396 2012-06-26 15:55 2008-01-23 Show GitHub Exploit DB Packet Storm
240376 7.5 危険 citadel - Citadel SMTP サーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0394 2012-06-26 15:54 2008-01-23 Show GitHub Exploit DB Packet Storm
240377 5.8 警告 gradman - GradMan の info.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0393 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
240378 7.5 危険 alilg - aliTalk の inc/elementz.php における任意のユーザアカウントを追加される脆弱性 CWE-287
不適切な認証
CVE-2008-0391 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
240379 7.5 危険 AuraCMS - AuraCMS のstat.php における online.db.txt へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2008-0390 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
240380 7.8 危険 Firebird Project - Firebird SQL における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-0387 2012-06-26 15:54 2008-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256491 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginOps Landing Page Builder allows PHP Local File Inclusion.This issue affects Landing Page Builder:… CWE-22
Path Traversal
CVE-2024-43345 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
256492 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects EmbedPress: from n/a through … CWE-22
Path Traversal
CVE-2024-43328 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
256493 - - - Missing Authorization vulnerability in Jamie Bergen Plugin Notes Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Plugin Notes Plus: from n/a through 1.2.7. CWE-862
 Missing Authorization
CVE-2024-43326 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
256494 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Metagauss User Registration Team RegistrationMagic allows Cross-Site Scripting (XSS).This … CWE-79
Cross-site Scripting
CVE-2024-43317 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
256495 - - - Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2. CWE-269
 Improper Privilege Management
CVE-2024-43311 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
256496 - - - In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerabil… - CVE-2024-42813 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
256497 - - - Command injection vulnerability in Asus RT-N15U 3.0.0.4.376_3754 allows a remote attacker to execute arbitrary code via the netstat function page. - CVE-2024-42757 2024-08-21 00:35 2024-08-16 Show GitHub Exploit DB Packet Storm
256498 - - - Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature. - CVE-2024-27728 2024-08-20 23:35 2024-08-16 Show GitHub Exploit DB Packet Storm
256499 5.4 MEDIUM
Network
mayurik advocate_office_management_system A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file register_case.php. The ma… CWE-79
Cross-site Scripting
CVE-2024-7686 2024-08-20 23:03 2024-08-12 Show GitHub Exploit DB Packet Storm
256500 5.4 MEDIUM
Network
mayurik advocate_office_management_system A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the f… CWE-79
Cross-site Scripting
CVE-2024-7685 2024-08-20 22:53 2024-08-12 Show GitHub Exploit DB Packet Storm