Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251151 1.2 注意 IBM
OpenBSD
- OpenSSH における X11 転送ポートをハイジャックされる脆弱性 CWE-200
情報漏えい
CVE-2008-3259 2010-07-7 16:40 2008-07-22 Show GitHub Exploit DB Packet Storm
251152 4.3 警告 アップル
サイバートラスト株式会社
レッドハット
SquirrelMail Project
- SquirrelMail におけるユーザインターフェースを偽装される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1581 2010-07-6 19:19 2009-05-12 Show GitHub Exploit DB Packet Storm
251153 6.8 警告 アップル
SquirrelMail Project
- SquirrelMail におけるセッション固定の脆弱性 CWE-287
不適切な認証
CVE-2009-1580 2010-07-6 19:18 2009-05-11 Show GitHub Exploit DB Packet Storm
251154 6.8 警告 アップル
サイバートラスト株式会社
レッドハット
SquirrelMail Project
- SquirrelMail における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-1579 2010-07-6 19:18 2009-05-10 Show GitHub Exploit DB Packet Storm
251155 4.3 警告 アップル
サイバートラスト株式会社
レッドハット
SquirrelMail Project
- SquirrelMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1578 2010-07-6 19:18 2009-05-8 Show GitHub Exploit DB Packet Storm
251156 8.5 危険 マイクロソフト - Microsoft IIS における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1256 2010-07-5 17:52 2010-06-8 Show GitHub Exploit DB Packet Storm
251157 4 警告 マイクロソフト - Microsoft Windows SharePoint Services におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-1264 2010-07-5 17:52 2010-06-8 Show GitHub Exploit DB Packet Storm
251158 6.9 警告 マイクロソフト - Open XML File Format Converter のインストールにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1254 2010-07-5 17:52 2010-06-8 Show GitHub Exploit DB Packet Storm
251159 9.3 危険 マイクロソフト - 複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1252 2010-07-5 17:51 2010-06-8 Show GitHub Exploit DB Packet Storm
251160 9.3 危険 マイクロソフト - 複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1251 2010-07-5 17:51 2010-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248991 5.5 MEDIUM
Local
razormist student_record_management_system A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulati… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-11097 2024-11-15 00:14 2024-11-12 Show GitHub Exploit DB Packet Storm
248992 6.1 MEDIUM
Network
opensuse mirrorcache A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the  … CWE-79
Cross-site Scripting
CVE-2024-49505 2024-11-15 00:13 2024-11-14 Show GitHub Exploit DB Packet Storm
248993 5.4 MEDIUM
Network
apple iphone_os
ipados
watchos
visionos
tvos
macos
safari
The issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, watchOS 11.1, visionOS 2.1, macOS Sequoia 15.1, Safari 18.1. Pr… NVD-CWE-noinfo
CVE-2024-44296 2024-11-14 23:58 2024-10-29 Show GitHub Exploit DB Packet Storm
248994 7.3 HIGH
Network
wppa wp_photo_album_plus The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This … CWE-94
Code Injection
CVE-2024-10958 2024-11-14 23:57 2024-11-10 Show GitHub Exploit DB Packet Storm
248995 8.8 HIGH
Network
tendacn g3_firmware Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function. CWE-787
 Out-of-bounds Write
CVE-2024-50854 2024-11-14 23:43 2024-11-14 Show GitHub Exploit DB Packet Storm
248996 9.8 CRITICAL
Network
anisha job_recruitment A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email le… CWE-89
SQL Injection
CVE-2024-11099 2024-11-14 23:37 2024-11-12 Show GitHub Exploit DB Packet Storm
248997 5.5 MEDIUM
Local
adobe audition Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by… CWE-125
Out-of-bounds Read
CVE-2024-47449 2024-11-14 23:32 2024-11-13 Show GitHub Exploit DB Packet Storm
248998 5.9 MEDIUM
Network
neomutt
mutt
redhat
neomutt
mutt
enterprise_linux
In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of th… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2024-49393 2024-11-14 23:31 2024-11-12 Show GitHub Exploit DB Packet Storm
248999 5.5 MEDIUM
Local
adobe illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass … CWE-125
Out-of-bounds Read
CVE-2024-47455 2024-11-14 23:26 2024-11-13 Show GitHub Exploit DB Packet Storm
249000 5.5 MEDIUM
Local
adobe illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass … CWE-125
Out-of-bounds Read
CVE-2024-47454 2024-11-14 23:26 2024-11-13 Show GitHub Exploit DB Packet Storm