Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226491 4.3 警告 RADVISION - Radvision Scopia の entry/index.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2965 2012-12-20 19:28 2009-08-25 Show GitHub Exploit DB Packet Storm
226492 4.3 警告 xapian - Xapian Omega におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2947 2012-12-20 19:28 2009-09-14 Show GitHub Exploit DB Packet Storm
226493 4.3 警告 stanford - Stanford University WebAuth の weblogin/login.fcgi におけるパスワードを特定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2945 2012-12-20 19:28 2009-08-31 Show GitHub Exploit DB Packet Storm
226494 7.5 危険 pygresql - Python 用の pygresql モジュールにおけるマルチバイト文字のエンコーディングに関する問題を利用される脆弱性 CWE-Other
その他 		CVE-2009-2940 2012-12-20 19:28 2009-10-14 Show GitHub Exploit DB Packet Storm
226495 6.9 警告 Postfix Project - Debian GNU/Linux などの製品で使用される postfix パッケージにおけるシンボリックリンク攻撃を実行される脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-2939 2012-12-20 19:28 2009-09-21 Show GitHub Exploit DB Packet Storm
226496 9.3 危険 programmedintegration - Programmed Integration PIPL の xaudio.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2934 2012-12-20 19:28 2009-08-21 Show GitHub Exploit DB Packet Storm
226497 7.5 危険 Piwigo - Piwigo の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2933 2012-12-20 19:28 2009-08-21 Show GitHub Exploit DB Packet Storm
226498 4.3 警告 SAP - SAP NetWeaver Application Server の UDDI クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2932 2012-12-20 19:28 2009-08-21 Show GitHub Exploit DB Packet Storm
226499 7.8 危険 slideshowpro - SlideShowPro Director の p.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2931 2012-12-20 19:28 2009-08-21 Show GitHub Exploit DB Packet Storm
226500 4.3 警告 SpringSource - SpringSource tc Server などの製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2907 2012-12-20 19:28 2010-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312761 6.5 MEDIUM
Network 		gitlab gitlab A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon import… NVD-CWE-noinfo
CVE-2024-8041 2024-09-12 01:54 2024-08-23 Show GitHub Exploit DB Packet Storm
312762 6.4 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipel… CWE-77
Command Injection 		CVE-2024-7110 2024-09-12 01:52 2024-08-23 Show GitHub Exploit DB Packet Storm
312763 6.5 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab CE/EE affecting all versions starting from 8.2 prior to 17.1.6 starting from 17.2 prior to 17.2.4, and starting from 17.3 prior to 17.3.1, which allows an attacker t… NVD-CWE-noinfo
CVE-2024-6502 2024-09-12 01:49 2024-08-23 Show GitHub Exploit DB Packet Storm
312764 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() In zynq_qspi_exec_mem_op(), kzalloc() is directly u… CWE-476
 NULL Pointer Dereference 		CVE-2021-4441 2024-09-12 01:43 2024-08-22 Show GitHub Exploit DB Packet Storm
312765 4.7 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota rescan and disable leading to NULL pointer deref If we have one task trying to start the quota resc… CWE-476
 NULL Pointer Dereference 		CVE-2023-52896 2024-09-12 01:37 2024-08-21 Show GitHub Exploit DB Packet Storm
312766 5.4 MEDIUM
Network 		share-this-image share_this_image The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shortcode in all versions up to, and including, 2.02 due to insufficient input sani… CWE-79
Cross-site Scripting 		CVE-2024-8363 2024-09-12 01:35 2024-09-5 Show GitHub Exploit DB Packet Storm
312767 5.3 MEDIUM
Network 		ivorysearch ivory_search The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_load_posts function. This makes it possi… NVD-CWE-noinfo
CVE-2024-6835 2024-09-12 01:32 2024-09-5 Show GitHub Exploit DB Packet Storm
312768 8.1 HIGH
Network 		bitapps file_manager The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessi… CWE-362
Race Condition 		CVE-2024-7627 2024-09-12 01:31 2024-09-5 Show GitHub Exploit DB Packet Storm
312769 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: don't reissue in case of poll race on multishot request A previous commit fixed a poll race that can occur, but it… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2023-52895 2024-09-12 01:31 2024-08-21 Show GitHub Exploit DB Packet Storm
312770 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() In Google internal bug 265639009 we've received an (as yet) unr… CWE-476
 NULL Pointer Dereference 		CVE-2023-52894 2024-09-12 01:27 2024-08-21 Show GitHub Exploit DB Packet Storm