Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228031 4.3 警告 SmarterTools Inc. - SmarterTools SmarterTrack の frmTickets.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4995 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228032 4.3 警告 SmarterTools Inc. - SmarterTools SmarterTrack の frmKBSearch.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4994 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228033 7.5 危険 script-shop24 - LM Starmail Paidmail の home.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4993 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228034 7.5 危険 script-shop24 - LM Starmail Paidmail の paidbanner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4992 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228035 10 危険 SAP - SAP Business One の NT_Naming_Service.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4988 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228036 7.5 危険 scripteen - Scripteen Free Image Hosting Script の admin/header.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2009-4987 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228037 7.5 危険 websitesrus - Accessories Me PHP Affiliate Script の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4985 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228038 4.3 警告 websitesrus - Accessories Me PHP Affiliate Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4984 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228039 4.3 警告 snowhall - Silurus Classifieds におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4983 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228040 5 警告 tufat - MyBackup の down.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4978 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318281 - - - The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS s… - CVE-2024-33656 2024-08-22 02:24 2024-08-22 Show GitHub Exploit DB Packet Storm
318282 - - - A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could all… - CVE-2024-20375 2024-08-22 02:24 2024-08-22 Show GitHub Exploit DB Packet Storm
318283 9.8 CRITICAL
Network
arajajyothibabu school_management_system School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php. CWE-89
SQL Injection
CVE-2024-42572 2024-08-22 01:35 2024-08-20 Show GitHub Exploit DB Packet Storm
318284 - - - An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file. - CVE-2024-42563 2024-08-22 01:35 2024-08-20 Show GitHub Exploit DB Packet Storm
318285 - - - Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php. - CVE-2024-42556 2024-08-22 01:35 2024-08-20 Show GitHub Exploit DB Packet Storm
318286 9.0 CRITICAL
Network
typecho typecho A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting
CVE-2024-35540 2024-08-22 01:05 2024-08-21 Show GitHub Exploit DB Packet Storm
318287 8.6 HIGH
Local
scilico i-librarian Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component. CWE-79
Cross-site Scripting
CVE-2024-40500 2024-08-22 01:05 2024-08-13 Show GitHub Exploit DB Packet Storm
318288 5.3 MEDIUM
Network
matrix javascript_sdk matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's g… CWE-674
 Uncontrolled Recursion
CVE-2024-42369 2024-08-22 01:01 2024-08-21 Show GitHub Exploit DB Packet Storm
318289 8.8 HIGH
Network
projectcapsule capsule Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e.,… CWE-863
 Incorrect Authorization
CVE-2024-39690 2024-08-22 01:01 2024-08-21 Show GitHub Exploit DB Packet Storm
318290 5.4 MEDIUM
Network
3ds 3dexperience A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execu… CWE-79
Cross-site Scripting
CVE-2024-6378 2024-08-22 00:53 2024-08-20 Show GitHub Exploit DB Packet Storm