Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223281 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0269 2014-02-13 16:29 2014-02-11 Show GitHub Exploit DB Packet Storm
223282 4.3 警告 マイクロソフト - Microsoft Internet Explorer 8 から 11 における Mandatory Integrity Control 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0268 2014-02-13 16:28 2014-02-11 Show GitHub Exploit DB Packet Storm
223283 9.3 危険 マイクロソフト - Microsoft Internet Explorer 11 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0267 2014-02-13 16:27 2014-02-11 Show GitHub Exploit DB Packet Storm
223284 4.3 警告 マイクロソフト - Microsoft .NET Framework の VsaVb7rt.dll における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0295 2014-02-13 16:26 2014-02-11 Show GitHub Exploit DB Packet Storm
223285 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0257 2014-02-13 16:25 2014-02-11 Show GitHub Exploit DB Packet Storm
223286 5 警告 マイクロソフト - Microsoft .NET Framework におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0253 2014-02-13 16:23 2014-02-11 Show GitHub Exploit DB Packet Storm
223287 10 危険 マイクロソフト - Microsoft Forefront Protection 2010 for Exchange Server における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-0294 2014-02-13 16:21 2014-02-11 Show GitHub Exploit DB Packet Storm
223288 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の Direct2D の実装における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0263 2014-02-13 16:20 2014-02-11 Show GitHub Exploit DB Packet Storm
223289 7.8 危険 マイクロソフト - 複数の Microsoft Windows 製品の IPv6 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0254 2014-02-13 16:19 2014-02-11 Show GitHub Exploit DB Packet Storm
223290 7.1 危険 マイクロソフト - 複数の Microsoft Windows 製品における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0266 2014-02-13 16:18 2014-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314471 - - - The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the ellipt… - CVE-2024-48948 2024-11-6 04:36 2024-10-15 Show GitHub Exploit DB Packet Storm
314472 - - - The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege users such as admin to perform Stored C… - CVE-2024-5968 2024-11-6 04:36 2024-10-9 Show GitHub Exploit DB Packet Storm
314473 9.8 CRITICAL
Network 		toshibatec
sharp 		e-studio1058_firmware
e-studio1208_firmware
e-studio908_firmware
bp-90c70_firmware
bp-90c80_firmware
bp-70c65_firmware
bp-70c55_firmware
bp-70c45_firmware
bp-70c36_firmware 		Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability. CWE-306
Missing Authentication for Critical Function 		CVE-2024-47406 2024-11-6 04:36 2024-10-25 Show GitHub Exploit DB Packet Storm
314474 8.1 HIGH
Network 		toshibatec
sharp 		e-studio1058_firmware
e-studio1208_firmware
e-studio908_firmware
bp-90c70_firmware
bp-90c80_firmware
bp-70c65_firmware
bp-70c55_firmware
bp-70c45_firmware
bp-70c36_firmware 		Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some … NVD-CWE-Other
CVE-2024-47005 2024-11-6 04:36 2024-10-25 Show GitHub Exploit DB Packet Storm
314475 4.8 MEDIUM
Network 		toshibatec
sharp 		e-studio1058_firmware
e-studio1208_firmware
e-studio908_firmware
bp-90c70_firmware
bp-90c80_firmware
bp-70c65_firmware
bp-70c55_firmware
bp-70c45_firmware
bp-70c36_firmware 		Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, ma… CWE-79
Cross-site Scripting 		CVE-2024-48870 2024-11-6 04:34 2024-10-25 Show GitHub Exploit DB Packet Storm
314476 6.1 MEDIUM
Network 		toshibatec
sharp 		e-studio1058_firmware
e-studio1208_firmware
e-studio908_firmware
bp-90c70_firmware
bp-90c80_firmware
bp-70c65_firmware
bp-70c55_firmware
bp-70c45_firmware
bp-70c36_firmware 		Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected prod… CWE-79
Cross-site Scripting 		CVE-2024-47801 2024-11-6 04:34 2024-10-25 Show GitHub Exploit DB Packet Storm
314477 8.8 HIGH
Network 		draytek vigor3900_firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the modifyrow function. CWE-78
OS Command  		CVE-2024-51248 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm
314478 8.8 HIGH
Network 		draytek vigor3900_firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPPo function. CWE-78
OS Command  		CVE-2024-51247 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm
314479 8.8 HIGH
Network 		draytek vigor3900_firmware In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the rename_table function. CWE-78
OS Command  		CVE-2024-51245 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm
314480 8.8 HIGH
Network 		draytek vigor3900_firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doIPSec function. CWE-78
OS Command  		CVE-2024-51244 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm