Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251561	3.5	注意	Terminal PHP Shell	-	TYPO3 用 Terminal PHP Shell エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1082	2012-02-17 14:37	2012-02-14	Show	GitHub Exploit DB Packet Storm

251562	4.3	警告	Roderick Braun	-	TYPO3 用 Yet another Google search エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1081	2012-02-17 14:37	2012-02-14	Show	GitHub Exploit DB Packet Storm

251563	4.3	警告	Euro Calculator	-	TYPO3 用 Euro Calculator エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1080	2012-02-17 14:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

251564	6.5	警告	Helut Hummel	-	TYPO3 用 Webservices for TYPO3 エクステンションにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-1079	2012-02-17 14:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

251565	5	警告	Claus Due	-	TYPO3 用 System Utilities エクステンションにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1078	2012-02-17 14:35	2012-02-14	Show	GitHub Exploit DB Packet Storm

251566	7.5	危険	Bluechip Software	-	TYPO3 用 Post data records to Facebook エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1077	2012-02-17 14:34	2012-02-14	Show	GitHub Exploit DB Packet Storm

251567	4.3	警告	Robert Gonda	-	TYPO3 用 Documents download エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1076	2012-02-17 14:34	2012-02-14	Show	GitHub Exploit DB Packet Storm

251568	7.5	危険	Robert Gonda	-	TYPO3 用 Documents download エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1075	2012-02-17 14:33	2012-02-14	Show	GitHub Exploit DB Packet Storm

251569	7.5	危険	White Papers	-	TYPO3 用 White Papers エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1074	2012-02-17 14:33	2012-02-14	Show	GitHub Exploit DB Packet Storm

251570	4.3	警告	Category-System	-	TYPO3 用 Category-System エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1073	2012-02-17 14:31	2012-02-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310011	-		-	-	GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.	-	CVE-2024-50610	2024-10-31 04:35	2024-10-28	Show	GitHub Exploit DB Packet Storm

310012	-		-	-	mipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller\ApiAdminSetting.php via the ICP parameter.	-	CVE-2024-48233	2024-10-31 04:35	2024-10-26	Show	GitHub Exploit DB Packet Storm

310013	-		-	-	An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curl_exec exe…	-	CVE-2024-48232	2024-10-31 04:35	2024-10-26	Show	GitHub Exploit DB Packet Storm

310014	7.5	HIGH Network	emqx	nanomq	An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).	NVD-CWE-noinfo	CVE-2024-44460	2024-10-31 04:35	2024-09-13	Show	GitHub Exploit DB Packet Storm

310015	5.3	MEDIUM Network	hyperledger	fabric	Hyperledger Fabric through 2.5.9 does not verify that a request has a timestamp within the expected time window.	NVD-CWE-noinfo	CVE-2024-45244	2024-10-31 04:35	2024-08-25	Show	GitHub Exploit DB Packet Storm

310016	-		-	-	Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.	-	CVE-2023-31356	2024-10-31 04:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

310017	-		-	-	A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.	-	CVE-2023-20512	2024-10-31 04:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

310018	7.0	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: riscv: fix race when vmap stack overflow Currently, when detecting vmap stack overflow, riscv firstly switches to the so called s…	CWE-362 Race Condition	CVE-2022-49001	2024-10-31 03:58	2024-10-22	Show	GitHub Exploit DB Packet Storm

310019	6.1	MEDIUM Network	butlerblog	wp-members	The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, an…	CWE-79 Cross-site Scripting	CVE-2024-9231	2024-10-31 03:56	2024-10-22	Show	GitHub Exploit DB Packet Storm

310020	7.5	HIGH Network	esafenet	cdg	A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function actionViewDecyptFile of the file /com/esafenet/servlet/client/DecryptApplicationS…	CWE-22 Path Traversal	CVE-2024-10379	2024-10-31 03:54	2024-10-25	Show	GitHub Exploit DB Packet Storm