Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240421 7.5 危険 binn - Binn SBuilder の full_text.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0253 2012-06-26 15:54 2008-01-15 Show GitHub Exploit DB Packet Storm
240422 7.5 危険 cherrypy - 複数の製品の _get_file_path 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0252 2012-06-26 15:54 2008-01-11 Show GitHub Exploit DB Packet Storm
240423 9.3 危険 gateway - Gateway Weblaunch におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0221 2012-06-26 15:54 2008-01-10 Show GitHub Exploit DB Packet Storm
240424 7.5 危険 gateway - Gateway Weblaunch におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0220 2012-06-26 15:54 2008-01-10 Show GitHub Exploit DB Packet Storm
240425 6.9 警告 FreeBSD - FreeBSD のスクリプトプログラムにおけるユーザの端末からデータを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0217 2012-06-26 15:54 2008-01-14 Show GitHub Exploit DB Packet Storm
240426 2.1 注意 FreeBSD - FreeBSD の ptsname 関数における他のユーザから pty からのデータを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0216 2012-06-26 15:54 2008-01-14 Show GitHub Exploit DB Packet Storm
240427 4.9 警告 compaq - HP Compaq Business Notebook PC の BIOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-0211 2012-06-26 15:54 2008-03-27 Show GitHub Exploit DB Packet Storm
240428 4.3 警告 expressionengine - ExpressionEngine の index.php における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0202 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
240429 4.3 警告 expressionengine - ExpressionEngine の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0201 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
240430 4.3 警告 awesometemplateengine - AwesomeTemplateEngine の templates/example_template.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0190 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256381 - - - The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator), for the Fast Healthcare Interoperability Resources (FHIR) specification. Prio… - CVE-2024-45294 2024-09-7 02:15 2024-09-7 Show GitHub Exploit DB Packet Storm
256382 9.8 CRITICAL
Network 		mozilla thunderbird
firefox_esr
firefox 		Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could… CWE-787
 Out-of-bounds Write 		CVE-2024-8387 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
256383 9.8 CRITICAL
Network 		mozilla firefox
firefox_esr 		A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2… CWE-843
Type Confusion 		CVE-2024-8385 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
256384 9.8 CRITICAL
Network 		mozilla firefox_esr
firefox 		The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulner… CWE-787
 Out-of-bounds Write 		CVE-2024-8384 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
256385 9.8 CRITICAL
Network 		mozilla firefox_esr
firefox 		A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < … CWE-843
Type Confusion 		CVE-2024-8381 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
256386 10.0 CRITICAL
Network 		wpindeed ultimate_membership_pro Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro allows Object Injection.This issue affects Ultimate Membership Pro: from n/a through 12.6. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-43242 2024-09-7 01:57 2024-08-20 Show GitHub Exploit DB Packet Storm
256387 9.8 CRITICAL
Network 		wpindeed ultimate_membership_pro Improper Privilege Management vulnerability in azzaroco Ultimate Membership Pro allows Privilege Escalation.This issue affects Ultimate Membership Pro: from n/a through 12.6. NVD-CWE-noinfo
CVE-2024-43240 2024-09-7 01:57 2024-08-20 Show GitHub Exploit DB Packet Storm
256388 7.5 HIGH
Network 		raidenmaild raidenmaild Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server. CWE-22
Path Traversal 		CVE-2024-7693 2024-09-7 01:51 2024-08-12 Show GitHub Exploit DB Packet Storm
256389 - - - H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access… - CVE-2024-45758 2024-09-7 01:46 2024-09-7 Show GitHub Exploit DB Packet Storm
256390 - - - Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. This causes Dovecot to convert single mail with LF DOT LF in middle, into two email… - CVE-2024-25584 2024-09-7 01:46 2024-09-7 Show GitHub Exploit DB Packet Storm