Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251541 10 危険 シーメンス - 複数の Siemens 製品の HMI Web サーバにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-4508 2012-02-8 10:49 2012-01-24 Show GitHub Exploit DB Packet Storm
251542 2.6 注意 HTC Corporation - HTC 製 Android 端末に Wi-Fi 認証情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2011-4872 2012-02-7 16:21 2012-02-2 Show GitHub Exploit DB Packet Storm
251543 7.5 危険 Scriptsez.net - Scriptsez.net の Ez Album における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0983 2012-02-7 16:19 2012-02-2 Show GitHub Exploit DB Packet Storm
251544 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Agent Zone の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0982 2012-02-7 16:18 2012-02-2 Show GitHub Exploit DB Packet Storm
251545 5 警告 KYBERNETIKA - phpShowtime における任意のディレクトリおよびイメージファイルをリストアップされる脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0981 2012-02-7 16:17 2012-02-2 Show GitHub Exploit DB Packet Storm
251546 7.5 危険 phux Development - phux Download Manager の download.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0980 2012-02-7 16:16 2012-02-2 Show GitHub Exploit DB Packet Storm
251547 4.3 警告 TWiki - TWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0979 2012-02-7 16:14 2012-02-2 Show GitHub Exploit DB Packet Storm
251548 6.8 警告 LuraTech - LuraWave JP2 Browser Plug-In におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0978 2012-02-7 16:13 2012-02-2 Show GitHub Exploit DB Packet Storm
251549 9.3 危険 LuraTech - LuraWave JP2 ActiveX Control におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0977 2012-02-7 16:12 2012-02-2 Show GitHub Exploit DB Packet Storm
251550 2.1 注意 SilverStripe - SilverStripe の admin/EditForm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0976 2012-02-7 16:10 2012-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309851 7.1 HIGH
Local 		apple iphone_os
ipados
visionos
tvos 		A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup… NVD-CWE-noinfo
CVE-2024-44252 2024-10-31 03:11 2024-10-29 Show GitHub Exploit DB Packet Storm
309852 9.8 CRITICAL
Network 		codezips pet_shop_management_system A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file /deletebird.php. The manipulation of the argument … CWE-89
SQL Injection 		CVE-2024-10431 2024-10-31 03:10 2024-10-28 Show GitHub Exploit DB Packet Storm
309853 7.5 HIGH
Network 		useragent_project useragent Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2020-26311 2024-10-31 03:07 2024-10-27 Show GitHub Exploit DB Packet Storm
309854 6.1 MEDIUM
Network 		openrefine openrefine OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `/extension/gdata/authorized` endpoint includes the `state` GET parameter verbatim in a `<script>` tag … CWE-79
Cross-site Scripting 		CVE-2024-47878 2024-10-31 03:01 2024-10-25 Show GitHub Exploit DB Packet Storm
309855 5.5 MEDIUM
Local 		apple macos
iphone_os
ipados
watchos
visionos
tvos 		The issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, vision… NVD-CWE-noinfo
CVE-2024-44302 2024-10-31 02:49 2024-10-29 Show GitHub Exploit DB Packet Storm
309856 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system. NVD-CWE-noinfo
CVE-2024-44247 2024-10-31 02:49 2024-10-29 Show GitHub Exploit DB Packet Storm
309857 8.8 HIGH
Network 		pickplugins post_grid The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, and including, 2.1.12 due to insufficient escaping on the user supplied parameter and lack… CWE-89
SQL Injection 		CVE-2021-4450 2024-10-31 02:47 2024-10-16 Show GitHub Exploit DB Packet Storm
309858 7.2 HIGH
Network 		nintechnet ninjafirewall The NinjaFirewall plugin for WordPress is vulnerable to Authenticated PHAR Deserialization in versions up to, and including, 4.3.3. This allows authenticated attackers to perform phar deserialization… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-4451 2024-10-31 02:44 2024-10-16 Show GitHub Exploit DB Packet Storm
309859 6.9 MEDIUM
Network 		openrefine openrefine OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `export-rows` command can be used in such a way that it reflects part of the request verbatim, with a C… CWE-79
Cross-site Scripting 		CVE-2024-47880 2024-10-31 02:42 2024-10-25 Show GitHub Exploit DB Packet Storm
309860 - - - File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component. - CVE-2024-48594 2024-10-31 02:35 2024-10-29 Show GitHub Exploit DB Packet Storm