Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228121 6.8 警告 tweakfs - FSX 用の Create and Extract Zips TweakFS Zip Utility におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1458 2012-12-20 19:29 2010-04-20 Show GitHub Exploit DB Packet Storm
228122 4.3 警告 Piwik - Piwik の Login フォームにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1453 2012-12-20 19:29 2010-04-15 Show GitHub Exploit DB Packet Storm
228123 5 警告 レッドハット - Red Hat JBoss Enterprise Application Platform における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1429 2012-12-20 19:29 2010-04-27 Show GitHub Exploit DB Packet Storm
228124 4.3 警告 PreProject.com - Pre Classified Listings ASP の signup.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1371 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
228125 7.5 危険 PreProject.com - Pre Classified Listings ASP の detailad.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1370 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
228126 7.5 危険 PreProject.com - Pre Classified Listings ASP の signup.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1369 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
228127 4.3 警告 Uiga - Uiga Fan Club の admin/admin_login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1367 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
228128 7.5 危険 Uiga - Uiga Fan Club の admin/admin_login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1366 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
228129 7.5 危険 Uiga - Uiga Fan Club の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1365 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
228130 7.5 危険 Uiga - Uiga Personal Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1364 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318471 9.8 CRITICAL
Network
feehi feehicms A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The mani… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8295 2024-08-31 00:37 2024-08-29 Show GitHub Exploit DB Packet Storm
318472 9.8 CRITICAL
Network
feehi feehicms A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument Use… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8296 2024-08-31 00:36 2024-08-29 Show GitHub Exploit DB Packet Storm
318473 7.8 HIGH
Local
aertherwide exiftags Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute arbitrary code via the paresetag function. CWE-787
 Out-of-bounds Write
CVE-2024-42851 2024-08-31 00:30 2024-08-28 Show GitHub Exploit DB Packet Storm
318474 7.5 HIGH
Network
kitsada8621 digital_library_management_system A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwt_refresh_token… CWE-116
 Improper Encoding or Escaping of Output
CVE-2024-8297 2024-08-31 00:28 2024-08-29 Show GitHub Exploit DB Packet Storm
318475 9.8 CRITICAL
Network
gitapp dingfanzu A vulnerability was found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /aj… CWE-89
SQL Injection
CVE-2024-8301 2024-08-31 00:24 2024-08-29 Show GitHub Exploit DB Packet Storm
318476 4.8 MEDIUM
Adjacent
teldat rs123_firmware
rs123w_firmware
Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page. CWE-79
Cross-site Scripting
CVE-2022-39996 2024-08-31 00:17 2024-08-28 Show GitHub Exploit DB Packet Storm
318477 4.3 MEDIUM
Network
smashballoon reviews_feed The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i… CWE-352
 Origin Validation Error
CVE-2024-8200 2024-08-31 00:08 2024-08-28 Show GitHub Exploit DB Packet Storm
318478 4.3 MEDIUM
Network
smashballoon reviews_feed The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa… CWE-862
 Missing Authorization
CVE-2024-8199 2024-08-31 00:04 2024-08-28 Show GitHub Exploit DB Packet Storm
318479 8.8 HIGH
Network
skyss arfa-cms A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges. CWE-352
 Origin Validation Error
CVE-2024-45264 2024-08-31 00:02 2024-08-28 Show GitHub Exploit DB Packet Storm
318480 9.8 CRITICAL
Network
dlink dir-846w_firmware D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter. This vulnerability is exploited via a crafted POST request. CWE-78
OS Command 
CVE-2024-44342 2024-08-30 23:57 2024-08-28 Show GitHub Exploit DB Packet Storm