Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227971 2.1 注意 Paul Maddern - Drupal 用 Imagemenu モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6583 2013-08-26 15:25 2012-09-19 Show GitHub Exploit DB Packet Storm
227972 2.1 注意 Simon Tatham - PuTTY におけるログインパスワードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-4607 2013-08-26 14:02 2011-12-8 Show GitHub Exploit DB Packet Storm
227973 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager および Cisco Unified Presence におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-3453 2013-08-26 13:53 2013-08-21 Show GitHub Exploit DB Packet Storm
227974 4 警告 IBM - IBM Optim Performance Manager および IBM InfoSphere Optim Performance Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2979 2013-08-26 13:34 2013-08-20 Show GitHub Exploit DB Packet Storm
227975 2.6 注意 ヤフー株式会社 - ヤフオク! における SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他 		CVE-2013-4699 2013-08-23 18:43 2013-08-19 Show GitHub Exploit DB Packet Storm
227976 2.6 注意 ヤフー株式会社 - Android 版 Yahoo!ショッピングにおける SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他 		CVE-2013-4700 2013-08-23 18:41 2013-08-19 Show GitHub Exploit DB Packet Storm
227977 6.4 警告 JanRain - PHP OpenID Library における XML 外部実体参照に関する脆弱性 CWE-Other
その他 		CVE-2013-4701 2013-08-23 18:37 2013-08-21 Show GitHub Exploit DB Packet Storm
227978 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3198 2013-08-23 17:56 2013-08-13 Show GitHub Exploit DB Packet Storm
227979 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3197 2013-08-23 17:55 2013-08-13 Show GitHub Exploit DB Packet Storm
227980 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3196 2013-08-23 17:54 2013-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319921 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could acc… NVD-CWE-noinfo
CVE-2024-46675 2024-09-21 02:18 2024-09-13 Show GitHub Exploit DB Packet Storm
319922 9.8 CRITICAL
Network 		sfs winsure Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.This issue affects ww.Winsure: before 4.6.2. CWE-611
XXE 		CVE-2024-7098 2024-09-21 02:14 2024-09-17 Show GitHub Exploit DB Packet Storm
319923 9.8 CRITICAL
Network 		sfs insuree_gl Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection.This issue affects InsureE GL: before 4.6.2. CWE-89
SQL Injection 		CVE-2024-6401 2024-09-21 02:07 2024-09-17 Show GitHub Exploit DB Packet Storm
319924 7.8 HIGH
Local 		refuel autolabel An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a use… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2024-27321 2024-09-21 02:06 2024-09-12 Show GitHub Exploit DB Packet Storm
319925 8.8 HIGH
Network 		oretnom23 simple_forum\/discussion_system A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argu… CWE-22
Path Traversal 		CVE-2024-9032 2024-09-21 02:04 2024-09-20 Show GitHub Exploit DB Packet Storm
319926 8.1 HIGH
Network 		totolink a720r_firmware A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack… CWE-78
OS Command  		CVE-2024-8869 2024-09-21 01:59 2024-09-15 Show GitHub Exploit DB Packet Storm
319927 7.5 HIGH
Network 		xiaohe4966 tpmecms A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipu… CWE-22
Path Traversal 		CVE-2024-8876 2024-09-21 01:58 2024-09-16 Show GitHub Exploit DB Packet Storm
319928 6.7 MEDIUM
Local 		cisco identity_services_engine A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system a… CWE-78
OS Command  		CVE-2024-20469 2024-09-21 01:58 2024-09-5 Show GitHub Exploit DB Packet Storm
319929 4.7 MEDIUM
Network 		send_project send Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0… CWE-79
Cross-site Scripting 		CVE-2024-43799 2024-09-21 01:57 2024-09-11 Show GitHub Exploit DB Packet Storm
319930 8.8 HIGH
Network 		qnap qts
quts_hero 		A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execu… CWE-120
CWE-122
Classic Buffer Overflow
Heap-based Buffer Overflow 		CVE-2024-32763 2024-09-21 01:49 2024-09-7 Show GitHub Exploit DB Packet Storm