Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225831 6.8 警告 PHP工房 - Phpkobo Free Real Estate Contact Form の codelib/sys/common.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1062 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
225832 6.8 警告 PHP工房 - Phpkobo Short URL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1061 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
225833 6.8 警告 PHP工房 - Phpkobo Short URL の staff/app/common.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1060 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
225834 6.8 警告 PHP工房 - Phpkobo Address Book Script の codelib/cfg/common.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1059 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
225835 6.8 警告 PHP工房 - Phpkobo Address Book Script の codelib/cfg/common.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1058 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
225836 6.8 警告 PHP工房 - Phpkobo AdFreely におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1057 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
225837 6.8 警告 rockettheme - Joomla! 用の Rokdownloads コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1056 2012-12-20 19:29 2010-03-16 Show GitHub Exploit DB Packet Storm
225838 5.1 警告 tufat - osDate における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1055 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
225839 6.8 警告 zentracking - Zen Time Tracking における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1053 2012-12-20 19:29 2010-03-22 Show GitHub Exploit DB Packet Storm
225840 7.5 危険 Uiga - Uiga Business Portal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1049 2012-12-20 19:29 2010-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313381 8.8 HIGH
Network 		easytest easytest_online_test_platform SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid param… CWE-89
SQL Injection 		CVE-2024-43774 2024-09-4 21:26 2024-09-2 Show GitHub Exploit DB Packet Storm
313382 9.8 CRITICAL
Network 		easytest easytest_online_test_platform SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the cstr parameter. CWE-89
SQL Injection 		CVE-2024-43773 2024-09-4 21:26 2024-09-2 Show GitHub Exploit DB Packet Storm
313383 8.1 HIGH
Network 		symphonyfintech xts_mobile_trader
xts_web_trader 		This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attack… CWE-863
 Incorrect Authorization 		CVE-2024-45588 2024-09-4 21:15 2024-09-3 Show GitHub Exploit DB Packet Storm
313384 8.8 HIGH
Network 		symphonyfintech xts_mobile_trader
xts_web_trader 		This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remot… NVD-CWE-Other
CVE-2024-45587 2024-09-4 21:15 2024-09-3 Show GitHub Exploit DB Packet Storm
313385 8.8 HIGH
Network 		symphonyfintech xts_mobile_trader
xts_web_trader 		This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote… NVD-CWE-Other
CVE-2024-45586 2024-09-4 21:15 2024-09-3 Show GitHub Exploit DB Packet Storm
313386 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A bu… CWE-416
 Use After Free 		CVE-2024-44946 2024-09-4 21:15 2024-08-31 Show GitHub Exploit DB Packet Storm
313387 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device() hci_conn_params_add() never checks for a NULL value and could lead to a NULL… CWE-476
 NULL Pointer Dereference 		CVE-2024-43884 2024-09-4 21:15 2024-08-26 Show GitHub Exploit DB Packet Storm
313388 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() An UAF can happen when /proc/cpuset is read as reported in [1]. This can be rep… CWE-416
 Use After Free 		CVE-2024-43853 2024-09-4 21:15 2024-08-17 Show GitHub Exploit DB Packet Storm
313389 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when adding pages to compressed bio At add_ra_bio_pages() we are accessing the extent map to… CWE-416
 Use After Free 		CVE-2024-42314 2024-09-4 21:15 2024-08-17 Show GitHub Exploit DB Packet Storm
313390 9.8 CRITICAL
Network 		easytest easytest_online_test_platform SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter. CWE-89
SQL Injection 		CVE-2024-43772 2024-09-4 21:11 2024-09-2 Show GitHub Exploit DB Packet Storm