Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242021 6.8 警告 アップル - Apple Mac OS X における整数オーバーフローの脆弱性 - CVE-2007-0722 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
242022 6.8 警告 アップル - Apple Mac OS X の diskimages-helper における任意のコードを実行される脆弱性 - CVE-2007-0721 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
242023 7.2 危険 Comodo - Comodo Firewall Pro および Comodo Personal Firewall の cmdmon.sys におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0709 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
242024 7.2 危険 Comodo - Comodo Firewall Pro の cmdmon.sys におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0708 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
242025 6.8 警告 Gretech - GOM Player におけるスタックベースのバッファーオーバーフローの脆弱性 - CVE-2007-0707 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
242026 7.5 危険 epistemon - Epistemon の inc/common.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0701 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
242027 6.8 警告 free lan intra internet portal - FLIP におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0696 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
242028 7.5 危険 free lan intra internet portal - FLIP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-0695 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
242029 4.3 警告 diangemilang - DGNews の footer.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0694 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
242030 6.8 警告 diangemilang - DGNews の news.php における SQL インジェクションの脆弱性 - CVE-2007-0693 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250321 9.8 CRITICAL
Network
nurhodelta17 attendance_and_payroll_system A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-10420 2024-10-29 09:21 2024-10-28 Show GitHub Exploit DB Packet Storm
250322 9.8 CRITICAL
Network
nurhodelta17 attendance_and_payroll_system A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtime_row.php. The manipulation of … CWE-89
SQL Injection
CVE-2024-10421 2024-10-29 09:19 2024-10-28 Show GitHub Exploit DB Packet Storm
250323 9.8 CRITICAL
Network
nurhodelta17 attendance_and_payroll_system A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtime_add.php. … CWE-89
SQL Injection
CVE-2024-10422 2024-10-29 09:16 2024-10-28 Show GitHub Exploit DB Packet Storm
250324 8.8 HIGH
Network
yugeshverma student_project_allocation_system A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/project_selection/project_se… CWE-89
SQL Injection
CVE-2024-10423 2024-10-29 09:08 2024-10-28 Show GitHub Exploit DB Packet Storm
250325 5.3 MEDIUM
Network
drupal drupal core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist. CWE-209
Information Exposure Through an Error Message
CVE-2024-45440 2024-10-29 06:35 2024-08-29 Show GitHub Exploit DB Packet Storm
250326 6.8 MEDIUM
Adjacent
safie qbic_cloud_cc-2\/2l_firmware
safie_one_firmware
QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communi… CWE-295
Improper Certificate Validation 
CVE-2024-39771 2024-10-29 06:35 2024-08-28 Show GitHub Exploit DB Packet Storm
250327 5.4 MEDIUM
Network
hp poly_clariti_manager_firmware A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not properly neutralize input during a web page generation. CWE-79
Cross-site Scripting
CVE-2024-41911 2024-10-29 06:35 2024-08-6 Show GitHub Exploit DB Packet Storm
250328 3.3 LOW
Local
rd_labs_llc who The com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places sensitive information in the system log. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-40096 2024-10-29 06:35 2024-08-5 Show GitHub Exploit DB Packet Storm
250329 5.3 MEDIUM
Network
mecodia feripro An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a list of all users and their corresponding … NVD-CWE-Other
CVE-2024-41517 2024-10-29 06:35 2024-08-3 Show GitHub Exploit DB Packet Storm
250330 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-37295. Reason: This candidate is a reservation duplicate of CVE-2024-37295. Notes: All CVE users should reference CVE-2024-3729… - CVE-2024-36811 2024-10-29 06:15 2024-06-8 Show GitHub Exploit DB Packet Storm