Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241101 6.4 警告 AlstraSoft - AlstraSoft E-Friends の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4080 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241102 4.3 警告 AlstraSoft - AlstraSoft SMS Text Messaging Enterprise におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4079 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241103 4.3 警告 AlstraSoft - AlstraSoft Text Ads Enterprise におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4078 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241104 4.3 警告 AlstraSoft - AlstraSoft Video Share Enterprise におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4077 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241105 7.5 危険 ASP indir - Alisveris Sitesi Scripti の index.asp における SQL インジェクションの脆弱性 - CVE-2007-4076 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241106 4.3 警告 ASP indir - Alisveris Sitesi Scripti の index.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4075 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241107 10 危険 SUSE
centre for speech technology research		 - Gentoo Linux などの CSTR Festival のディフォルト設定における任意のコマンドを実行される脆弱性 CWE-16
環境設定 		CVE-2007-4074 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241108 9.3 危険 clever components - Clever Internet ActiveX Suite の CLINETSUITEX6.OCX の clInetSuiteX6.clWebDav ActiveX コントロールにおける絶対パストラバーサルの脆弱性 - CVE-2007-4067 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
241109 4.3 警告 Drupal - Drupal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4064 2012-06-26 15:54 2007-07-26 Show GitHub Exploit DB Packet Storm
241110 4.3 警告 Drupal - Drupal におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-4063 2012-06-26 15:54 2007-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250511 9.8 CRITICAL
Network 		tongda2000 office_anywhere A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown function of the file pda/appcenter/submenu.php. The manipulation of the argument appi… CWE-89
SQL Injection 		CVE-2024-10600 2024-11-5 04:45 2024-11-1 Show GitHub Exploit DB Packet Storm
250512 7.5 HIGH
Network 		tongda2000 office_anywhere A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the file /inc/package_static_resources.php. The manipu… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-10599 2024-11-5 04:44 2024-11-1 Show GitHub Exploit DB Packet Storm
250513 6.5 MEDIUM
Network 		tongda2000 office_anywhere A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the compone… CWE-862
 Missing Authorization 		CVE-2024-10598 2024-11-5 04:44 2024-11-1 Show GitHub Exploit DB Packet Storm
250514 - - - Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts … - CVE-2024-51406 2024-11-5 04:35 2024-11-1 Show GitHub Exploit DB Packet Storm
250515 - - - An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack. - CVE-2024-48270 2024-11-5 04:35 2024-11-1 Show GitHub Exploit DB Packet Storm
250516 - - - A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/email_templates.php. The vulnerability is exploitable … - CVE-2024-50802 2024-11-5 04:35 2024-11-1 Show GitHub Exploit DB Packet Storm
250517 - - - A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/collections.php. The vulnerability is exploitable via … - CVE-2024-50801 2024-11-5 04:35 2024-11-1 Show GitHub Exploit DB Packet Storm
250518 - - - Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: this is disputed by the vendor because fi… - CVE-2024-48734 2024-11-5 04:35 2024-10-31 Show GitHub Exploit DB Packet Storm
250519 - - - SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL commands via the POST body request. NOTE: this is disputed… - CVE-2024-48733 2024-11-5 04:35 2024-10-31 Show GitHub Exploit DB Packet Storm
250520 - - - http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter. - CVE-2023-52066 2024-11-5 04:35 2024-10-31 Show GitHub Exploit DB Packet Storm