Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225931 7.5 危険 Carlo Gavazzi - Carlo Gavazzi EOS-Box のファームウェアにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-6427 2012-12-25 16:33 2012-12-19 Show GitHub Exploit DB Packet Storm
225932 4.3 警告 シーメンス - 複数の Siemens 製品におけるサーバを偽装される脆弱性 CWE-200
情報漏えい
CVE-2012-4698 2012-12-25 16:32 2012-12-12 Show GitHub Exploit DB Packet Storm
225933 4.3 警告 VMware - VMware vCenter Server Appliance における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2012-6325 2012-12-25 15:19 2012-12-20 Show GitHub Exploit DB Packet Storm
225934 4 警告 VMware - VMware vCenter Server Appliance におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-6324 2012-12-25 15:19 2012-12-20 Show GitHub Exploit DB Packet Storm
225935 6.4 警告 IBM - IBM Tivoli Storage Manager for Space Management におけるファイルシステムオブジェクトを読まれる脆弱性 CWE-noinfo
情報不足
CVE-2012-5954 2012-12-25 15:17 2012-12-18 Show GitHub Exploit DB Packet Storm
225936 7.2 危険 IBM - IBM Tivoli Storage Manager for Space Management におけるファイルシステムオブジェクトを読まれる脆弱性 CWE-noinfo
情報不足
CVE-2012-4859 2012-12-25 15:03 2012-12-18 Show GitHub Exploit DB Packet Storm
225937 4 警告 Linux - Linux Kernel の mm/memory_hotplug.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2012-5517 2012-12-25 15:02 2012-07-31 Show GitHub Exploit DB Packet Storm
225938 4.7 警告 Linux - Linux Kernel の net/ipv4/tcp_illinois.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2012-4565 2012-12-25 14:30 2012-11-17 Show GitHub Exploit DB Packet Storm
225939 5 警告 Linux - Linux Kernel の net/ipv6/reassembly.c におけるネットワーク制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2012-4444 2012-12-25 14:25 2012-10-20 Show GitHub Exploit DB Packet Storm
225940 5.8 警告 Fetchmail Project - Fetchmail におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-3482 2012-12-25 14:11 2012-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313081 - - - Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. `@fs` denies access to files outside of Vite serving allow… CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2024-45811 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
313082 - - - arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. The `arduino-esp32` CI is vulnerable to multiple Poisoned Pipeline Execution (PPE… CWE-94
CWE-20
CWE-78
Code Injection
 Improper Input Validation 
OS Command 
CVE-2024-45798 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
313083 - - - Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a … - CVE-2024-42503 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
313084 - - - Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underly… - CVE-2024-42502 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
313085 - - - An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system… - CVE-2024-42501 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
313086 - - - A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vllm JSON web API can lead to a Denial of Service (DoS). The API used for LLM-base… CWE-400
 Uncontrolled Resource Consumption
CVE-2024-8939 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
313087 - - - A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service. CWE-617
 Reachable Assertion
CVE-2024-8768 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
313088 - - - Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks. - CVE-2024-38860 2024-09-20 21:30 2024-09-17 Show GitHub Exploit DB Packet Storm
313089 - - - Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez Login Register: from n/a through 3.2.5. CWE-266
 Incorrect Privilege Assignment
CVE-2024-21743 2024-09-20 21:30 2024-09-17 Show GitHub Exploit DB Packet Storm
313090 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web… CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output
CVE-2024-7873 2024-09-20 21:30 2024-09-17 Show GitHub Exploit DB Packet Storm