Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252121 10 危険 Goforandroid - Android 用 GO TwiWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1395 2012-03-9 11:10 2012-03-7 Show GitHub Exploit DB Packet Storm
252122 10 危険 Goforandroid - Android 用 GO Email Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1394 2012-03-9 11:08 2012-03-7 Show GitHub Exploit DB Packet Storm
252123 10 危険 Goforandroid - Android 用 GO SMS Pro アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1393 2012-03-9 11:06 2012-03-7 Show GitHub Exploit DB Packet Storm
252124 10 危険 MoboTap - Android 用 Dolphin Browser Mini アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1404 2012-03-8 16:30 2012-03-7 Show GitHub Exploit DB Packet Storm
252125 10 危険 MoboTap - Android 用 Dolphin Browser CN アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1403 2012-03-8 16:29 2012-03-7 Show GitHub Exploit DB Packet Storm
252126 10 危険 MoboTap - Android 用 Dolphin Browser HD アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1392 2012-03-8 16:29 2012-03-7 Show GitHub Exploit DB Packet Storm
252127 10 危険 Shanghai Truecolor Multimedia - Android 用 QianXun YingShi アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1402 2012-03-8 16:18 2011-03-7 Show GitHub Exploit DB Packet Storm
252128 10 危険 IntSig Information - Android 用 CamScanner アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1401 2012-03-8 16:16 2012-03-7 Show GitHub Exploit DB Packet Storm
252129 10 危険 uplusbox - Android 用 U+Box 2.0 Pad アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1400 2012-03-8 16:14 2012-03-7 Show GitHub Exploit DB Packet Storm
252130 10 危険 uplusbox - Android 用 U+Box 2.0 アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1399 2012-03-8 16:13 2012-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317471 - - - A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unknown part of the file /web-static/. The manipulation leads to files or director… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2024-8655 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
317472 - - - SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-8232 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
317473 - - - Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authenticatio… CWE-524
 Use of Cache Containing Sensitive Information 		CVE-2024-45596 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
317474 - - - cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component. - CVE-2024-34831 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
317475 6.5 MEDIUM
Network 		mozilla thunderbird When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2. CWE-416
 Use After Free 		CVE-2024-8394 2024-09-12 01:25 2024-09-7 Show GitHub Exploit DB Packet Storm
317476 8.8 HIGH
Network 		draytek vigor3900_firmware DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string function. CWE-78
OS Command  		CVE-2024-44845 2024-09-12 01:24 2024-09-7 Show GitHub Exploit DB Packet Storm
317477 8.8 HIGH
Network 		draytek vigor3900_firmware DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function. CWE-78
OS Command  		CVE-2024-44844 2024-09-12 01:24 2024-09-7 Show GitHub Exploit DB Packet Storm
317478 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmi_get_variable We can get EFI variables without fetching the attribute, so we must allow for that in g… CWE-476
 NULL Pointer Dereference 		CVE-2023-52893 2024-09-12 01:24 2024-08-21 Show GitHub Exploit DB Packet Storm
317479 4.3 MEDIUM
Network 		ngothang wp_multitasking The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-6852 2024-09-12 01:23 2024-09-8 Show GitHub Exploit DB Packet Storm
317480 4.3 MEDIUM
Network 		ngothang wp_multitasking The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-6853 2024-09-12 01:22 2024-09-8 Show GitHub Exploit DB Packet Storm