Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227681	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Jobs Zone の view_news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4463	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

227682	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Visa Zone の view_news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4462	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

227683	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Dating Zone の advanced_search_results.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4461	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

227684	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech MMORPG Zone の game.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4460	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

227685	6.8	警告	positive software	-	Positive Software H-Sphere WebShell の actions.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-4448	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

227686	4.3	警告	positive software	-	Positive Software H-Sphere WebShell の actions.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4447	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

227687	4.3	警告	rmsoft	-	Xoops 用の rmdp モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4435	2012-12-20 18:52	2008-10-3	Show	GitHub Exploit DB Packet Storm

227688	7.5	危険	rmsoft	-	Xoops 用の RMSOFT MiniShop モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4433	2012-12-20 18:52	2008-10-3	Show	GitHub Exploit DB Packet Storm

227689	4.3	警告	rmsoft	-	Xoops 用の RMSOFT MiniShop モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4432	2012-12-20 18:52	2008-10-3	Show	GitHub Exploit DB Packet Storm

227690	5	警告	トレンドマイクロ	-	Trend Micro OfficeScan のサーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-4403	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312021	9.8	CRITICAL Network	blakeembrey	template	@blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the attacker has access to write the template name. Version 1.…	CWE-94 Code Injection	CVE-2024-45390	2024-09-13 05:15	2024-09-4	Show	GitHub Exploit DB Packet Storm

312022	7.5	HIGH Network	tina	tina	Tina is an open-source content management system (CMS). Sites building with Tina CMS's command line interface (CLI) prior to version 1.6.2 that use a search token may be vulnerable to the search toke…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-45391	2024-09-13 05:13	2024-09-4	Show	GitHub Exploit DB Packet Storm

312023	4.2	MEDIUM Physics	yubico	yubikey_5c_nfc_firmware yubikey_5_nfc_firmware yubikey_5c_firmware yubikey_5_nano_firmware yubikey_5c_nano_firmware yubikey_5ci_firmware yubikey_5_nfc_fips_firmware yubikey_5c_nf…	Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive eq…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-45678	2024-09-13 05:07	2024-09-4	Show	GitHub Exploit DB Packet Storm

312024	4.7	MEDIUM Network	mozilla	firefox_focus	Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects Focus for iOS < 130.	NVD-CWE-noinfo	CVE-2024-8399	2024-09-13 04:45	2024-09-4	Show	GitHub Exploit DB Packet Storm

312025	7.5	HIGH Network	huawei	emui harmonyos	Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality.	NVD-CWE-noinfo	CVE-2024-42039	2024-09-13 04:37	2024-09-4	Show	GitHub Exploit DB Packet Storm

312026	7.5	HIGH Network	huawei	emui harmonyos	Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.	NVD-CWE-noinfo	CVE-2024-45441	2024-09-13 04:35	2024-09-4	Show	GitHub Exploit DB Packet Storm

312027	7.5	HIGH Network	huawei	emui harmonyos	Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	NVD-CWE-noinfo	CVE-2024-45450	2024-09-13 04:30	2024-09-4	Show	GitHub Exploit DB Packet Storm

312028	7.8	HIGH Local	intel	tdx_module_software	Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local acces…	NVD-CWE-Other	CVE-2024-39283	2024-09-13 04:15	2024-08-14	Show	GitHub Exploit DB Packet Storm

312029	8.2	HIGH Local	intel	nuc_x15_laptop_kit_lapbc510_firmware nuc_x15_laptop_kit_lapbc710_firmware nuc_x15_laptop_kit_lapac71g_firmware nuc_x15_laptop_kit_lapac71h_firmware nuc_x15_laptop_kit_lapkc51e_firmware	Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.	NVD-CWE-noinfo	CVE-2024-34163	2024-09-13 03:59	2024-08-14	Show	GitHub Exploit DB Packet Storm

312030	7.8	HIGH Local	intel	vtune_profiler oneapi_base_toolkit	Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-29015	2024-09-13 03:53	2024-08-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed