Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251201 5 警告 g.rodola - pyftpdlib の FTPServer.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6739 2012-03-27 18:42 2007-05-18 Show GitHub Exploit DB Packet Storm
251202 7.5 危険 g.rodola - pyftpdlib の FTPServer.py におけるアクセスを取得される脆弱性 CWE-287
不適切な認証 		CVE-2007-6737 2012-03-27 18:42 2007-07-13 Show GitHub Exploit DB Packet Storm
251203 6.5 警告 g.rodola - pyftpdlib の FTPServer.py におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6736 2012-03-27 18:42 2007-06-15 Show GitHub Exploit DB Packet Storm
251204 4 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるアクセス制限を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7242 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
251205 4 警告 IBM - IBM FileNet P8AE の Image Viewer コンポーネントにおけるアクセス制限を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7241 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
251206 7.2 危険 GNOME Project - gnome-power-manager における無人のラップトップにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7240 2012-03-27 18:42 2010-09-7 Show GitHub Exploit DB Packet Storm
251207 5 警告 Apache Software Foundation - Apache Wicket におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1089 2012-03-27 14:46 2012-03-23 Show GitHub Exploit DB Packet Storm
251208 4.3 警告 Apache Software Foundation - Apache Wicket におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0047 2012-03-27 14:43 2012-03-23 Show GitHub Exploit DB Packet Storm
251209 5 警告 Google - Google Chrome におけるサービス運用妨害 (システムリクエスト妨害) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3049 2012-03-27 14:26 2012-03-21 Show GitHub Exploit DB Packet Storm
251210 10 危険 Google - Google Chrome におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1846 2012-03-27 14:21 2012-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309801 7.5 HIGH
Network 		aetherproject onos-a1t
sdran-in-a-box 		An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specificall… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-48809 2024-11-7 04:33 2024-11-5 Show GitHub Exploit DB Packet Storm
309802 9.8 CRITICAL
Network 		openimaj openimaj An XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file. CWE-611
XXE 		CVE-2024-51136 2024-11-7 04:31 2024-11-5 Show GitHub Exploit DB Packet Storm
309803 4.9 MEDIUM
Network 		bitrix24 bitrix24 Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server v… CWE-522
 Insufficiently Protected Credentials 		CVE-2024-34887 2024-11-7 04:28 2024-11-5 Show GitHub Exploit DB Packet Storm
309804 4.9 MEDIUM
Network 		bitrix24 bitrix24 Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request. CWE-522
 Insufficiently Protected Credentials 		CVE-2024-34883 2024-11-7 04:28 2024-11-5 Show GitHub Exploit DB Packet Storm
309805 4.9 MEDIUM
Network 		bitrix24 bitrix24 Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request. CWE-522
 Insufficiently Protected Credentials 		CVE-2024-34882 2024-11-7 04:28 2024-11-5 Show GitHub Exploit DB Packet Storm
309806 8.8 HIGH
Network 		idrsdev agile-board A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. CWE-94
Code Injection 		CVE-2024-51329 2024-11-7 04:19 2024-11-5 Show GitHub Exploit DB Packet Storm
309807 8.1 HIGH
Network 		loginizer loginizer The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2. This is due to insufficient verification on the user be… NVD-CWE-noinfo
CVE-2024-10097 2024-11-7 04:14 2024-11-5 Show GitHub Exploit DB Packet Storm
309808 9.8 CRITICAL
Network 		nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, cau… NVD-CWE-noinfo
CVE-2024-49368 2024-11-7 03:28 2024-10-22 Show GitHub Exploit DB Packet Storm
309809 - - - A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to … CWE-89
SQL Injection 		CVE-2024-20536 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
309810 - - - A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need … CWE-22
Path Traversal 		CVE-2024-20532 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm