Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223671 4.3 警告 Potix Corporation - ZK Framework におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5966 2013-11-21 14:37 2013-10-8 Show GitHub Exploit DB Packet Storm
223672 6.8 警告 ISC, Inc. - ISC BIND などの製品で使用される Microsoft Windows Server 2008 の Winsock WSAIoctl API における IP アドレス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6230 2013-11-20 18:06 2013-11-5 Show GitHub Exploit DB Packet Storm
223673 2.1 注意 Linux - Linux Kernel の kernel/signal.c における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2141 2013-11-20 18:03 2013-04-25 Show GitHub Exploit DB Packet Storm
223674 6.4 警告 レッドハット - Red Hat JBoss Enterprise Application Platform におけるセッションをハイジャックされる脆弱性 CWE-16
環境設定 		CVE-2013-4128 2013-11-20 17:36 2013-08-12 Show GitHub Exploit DB Packet Storm
223675 7.2 危険 VMware - Linux 上で稼働する VMware Workstation および VMware Player におけるホスト OS の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5972 2013-11-20 17:14 2013-11-14 Show GitHub Exploit DB Packet Storm
223676 5.8 警告 Google - Google Chrome におけるサンドボックスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6802 2013-11-20 16:56 2013-11-14 Show GitHub Exploit DB Packet Storm
223677 4.3 警告 Percipient Studios - Umbraco CMS 用 Percipient Studios ImageGen の imagegen.ashx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0741 2013-11-20 16:46 2013-10-31 Show GitHub Exploit DB Packet Storm
223678 3.5 注意 D-Link Systems, Inc. - D-Link DSL-2760U ゲートウェイにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5223 2013-11-20 15:18 2013-11-12 Show GitHub Exploit DB Packet Storm
223679 7.6 危険 D-Link Systems, Inc. - D-Link DSL-2740B ゲートウェイのファームウェアにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2271 2013-11-20 15:18 2013-11-14 Show GitHub Exploit DB Packet Storm
223680 6.8 警告 Sunil Nanda - WordPress 用 Blue Wrench Video Widget プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-6797 2013-11-20 15:01 2013-10-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314801 8.8 HIGH
Network 		phpoffice phpspreadsheet PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links images from arbitrary paths. When embedding images h… CWE-22
CWE-918
Path Traversal
Server-Side Request Forgery (SSRF)  		CVE-2024-45291 2024-10-17 04:09 2024-10-8 Show GitHub Exploit DB Packet Storm
314802 5.3 MEDIUM
Network 		php-fpm php-fpm In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being proce… NVD-CWE-noinfo
CVE-2024-8925 2024-10-17 03:53 2024-10-8 Show GitHub Exploit DB Packet Storm
314803 - - - SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component. - CVE-2024-46532 2024-10-17 03:35 2024-10-12 Show GitHub Exploit DB Packet Storm
314804 8.8 HIGH
Network 		php-fpm php-fpm In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/a… CWE-78
OS Command  		CVE-2024-8926 2024-10-17 03:35 2024-10-8 Show GitHub Exploit DB Packet Storm
314805 3.3 LOW
Local 		php-fpm php-fpm In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catch_workers_output = yes, it may be possi… NVD-CWE-Other
CVE-2024-9026 2024-10-17 03:30 2024-10-8 Show GitHub Exploit DB Packet Storm
314806 7.5 HIGH
Network 		php-fpm php-fpm In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in ce… NVD-CWE-noinfo
CVE-2024-8927 2024-10-17 03:28 2024-10-8 Show GitHub Exploit DB Packet Storm
314807 8.2 HIGH
Network 		qualcomm wsa8845h_firmware
wsa8845_firmware
wsa8840_firmware
wsa8835_firmware
wsa8832_firmware
wsa8830_firmware
wcd9395_firmware
wcd9390_firmware
wcd9385_firmware
wcd9380_firmware 		Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. CWE-125
Out-of-bounds Read 		CVE-2024-33073 2024-10-17 03:25 2024-10-7 Show GitHub Exploit DB Packet Storm
314808 7.5 HIGH
Network 		qualcomm snapdragon_8\+_gen_2_mobile_platform_firmware
wsa8845h_firmware
wsa8845_firmware
wsa8840_firmware
wsa8835_firmware
wsa8832_firmware
wsa8830_firmware
wcd9395_firmware
wcd9390_f… 		Transient DOS while parsing probe response and assoc response frame. CWE-125
Out-of-bounds Read 		CVE-2024-38397 2024-10-17 03:23 2024-10-7 Show GitHub Exploit DB Packet Storm
314809 7.8 HIGH
Local 		qualcomm wsa8835_firmware
wsa8830_firmware
wsa8810_firmware
wcn3950_firmware
wcd9380_firmware
wcd9375_firmware
wcd9370_firmware
srv1m_firmware
srv1h_firmware
snapdragon_8_gen_1_mobi… 		Memory corruption while processing user packets to generate page faults. CWE-416
 Use After Free 		CVE-2024-38399 2024-10-17 03:17 2024-10-7 Show GitHub Exploit DB Packet Storm
314810 7.3 HIGH
Local 		siemens modelsim
questa 		A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loaded from the current … CWE-427
 Uncontrolled Search Path Element 		CVE-2024-47194 2024-10-17 03:15 2024-10-8 Show GitHub Exploit DB Packet Storm