Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240421 7.5 危険 binn - Binn SBuilder の full_text.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0253 2012-06-26 15:54 2008-01-15 Show GitHub Exploit DB Packet Storm
240422 7.5 危険 cherrypy - 複数の製品の _get_file_path 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0252 2012-06-26 15:54 2008-01-11 Show GitHub Exploit DB Packet Storm
240423 9.3 危険 gateway - Gateway Weblaunch におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0221 2012-06-26 15:54 2008-01-10 Show GitHub Exploit DB Packet Storm
240424 7.5 危険 gateway - Gateway Weblaunch におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0220 2012-06-26 15:54 2008-01-10 Show GitHub Exploit DB Packet Storm
240425 6.9 警告 FreeBSD - FreeBSD のスクリプトプログラムにおけるユーザの端末からデータを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0217 2012-06-26 15:54 2008-01-14 Show GitHub Exploit DB Packet Storm
240426 2.1 注意 FreeBSD - FreeBSD の ptsname 関数における他のユーザから pty からのデータを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0216 2012-06-26 15:54 2008-01-14 Show GitHub Exploit DB Packet Storm
240427 4.9 警告 compaq - HP Compaq Business Notebook PC の BIOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2008-0211 2012-06-26 15:54 2008-03-27 Show GitHub Exploit DB Packet Storm
240428 4.3 警告 expressionengine - ExpressionEngine の index.php における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0202 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
240429 4.3 警告 expressionengine - ExpressionEngine の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0201 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
240430 4.3 警告 awesometemplateengine - AwesomeTemplateEngine の templates/example_template.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0190 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256741 7.5 HIGH
Network
barix sip_client_firmware Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor CWE-200
Information Exposure
CVE-2024-41700 2024-09-4 04:37 2024-08-20 Show GitHub Exploit DB Packet Storm
256742 7.5 HIGH
Network
tenda fh1201_firmware Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS)… CWE-787
 Out-of-bounds Write
CVE-2024-42941 2024-09-4 04:35 2024-08-16 Show GitHub Exploit DB Packet Storm
256743 7.5 HIGH
Network
tenda fh1201_firmware Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS… CWE-787
 Out-of-bounds Write
CVE-2024-42940 2024-09-4 04:35 2024-08-16 Show GitHub Exploit DB Packet Storm
256744 5.4 MEDIUM
Network
mayurik best_house_rental_management_system A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via… CWE-79
Cross-site Scripting
CVE-2024-40473 2024-09-4 04:35 2024-08-12 Show GitHub Exploit DB Packet Storm
256745 6.1 MEDIUM
Network
lopalopa responsive_school_management_system A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary … CWE-79
Cross-site Scripting
CVE-2024-41241 2024-09-4 04:35 2024-08-8 Show GitHub Exploit DB Packet Storm
256746 7.5 HIGH
Network
hms-networks ewon_cosy\+_firmware Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in vers… CWE-312
 Cleartext Storage of Sensitive Information
CVE-2024-33892 2024-09-4 04:18 2024-08-3 Show GitHub Exploit DB Packet Storm
256747 7.2 HIGH
Network
hms-networks ewon_cosy\+_firmware Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s… CWE-78
OS Command 
CVE-2024-33896 2024-09-4 04:02 2024-08-3 Show GitHub Exploit DB Packet Storm
256748 6.6 MEDIUM
Physics
hms-networks ewon_cosy\+_firmware Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is n… CWE-798
 Use of Hard-coded Credentials
CVE-2024-33895 2024-09-4 04:02 2024-08-3 Show GitHub Exploit DB Packet Storm
256749 9.8 CRITICAL
Network
arajajyothibabu school_management_system School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php. CWE-89
SQL Injection
CVE-2024-42568 2024-09-4 03:35 2024-08-20 Show GitHub Exploit DB Packet Storm
256750 7.5 HIGH
Network
tenda fh1206_firmware Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the modino parameter in the fromPptpUserAdd function. This vulnerability allows attackers to cause a Denial of Service (DoS) v… CWE-787
 Out-of-bounds Write
CVE-2024-42987 2024-09-4 03:35 2024-08-16 Show GitHub Exploit DB Packet Storm