Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228241 7.5 危険 softbiz - SoftBiz Dating Script の cat_products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2790 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
228242 6.8 警告 reputation - PunBB 用の Reputation プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2787 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
228243 7.5 危険 reputation - PunBB 用の Reputation プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2786 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
228244 4.3 警告 XOOPS - XOOPS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2783 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
228245 7.5 危険 sellatsite.com - Smart ASP Survey の showresult.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2776 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
228246 7.5 危険 phparcadescript - PHP Arcade Script の linkout.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2775 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
228247 7.5 危険 php-paid4mail - PHP Paid 4 Mail Script の paidbanner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2774 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
228248 7.5 危険 shop-020 - PHP Paid 4 Mail Script の home.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-2773 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
228249 4.3 警告 realtysoft - PG Roommate Finder Solution におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2772 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
228250 7.5 危険 powerupload - PowerUpload における管理者アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2770 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310921 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SP… NVD-CWE-noinfo
CVE-2024-47667 2024-10-24 01:31 2024-10-10 Show GitHub Exploit DB Packet Storm
310922 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing waker_bfqq after splitting After commit 42c306ed7233 ("block, bfq: don't break merge chain in b… CWE-416
 Use After Free
CVE-2024-49854 2024-10-24 01:29 2024-10-21 Show GitHub Exploit DB Packet Storm
310923 8.8 HIGH
Network
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming tcp/ipv4 connections: when a label 'foo' … NVD-CWE-noinfo
CVE-2024-47659 2024-10-24 01:29 2024-10-9 Show GitHub Exploit DB Packet Storm
310924 8.8 HIGH
Adjacent
wavlink wn530h4_firmware
wn530hg4_firmware
wn572hg3_firmware
A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Goto_chidx of the file login.cgi of the component Fron… CWE-787
 Out-of-bounds Write
CVE-2024-10194 2024-10-24 01:16 2024-10-20 Show GitHub Exploit DB Packet Storm
310925 7.2 HIGH
Network
wavlink wn530h4_firmware
wn530hg4_firmware
wn572hg3_firmware
A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the function ping_ddns of the file internet.cgi. The manipulation of … CWE-77
Command Injection
CVE-2024-10193 2024-10-24 01:16 2024-10-20 Show GitHub Exploit DB Packet Storm
310926 5.3 MEDIUM
Network
stylemixthemes cost_calculator_builder The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipula… NVD-CWE-Other
CVE-2024-6010 2024-10-24 01:15 2024-09-7 Show GitHub Exploit DB Packet Storm
310927 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in OPTEE transport Channels can be shared between protocols, avoid freeing the same channel d… CWE-415
 Double Free
CVE-2024-49853 2024-10-24 01:14 2024-10-21 Show GitHub Exploit DB Packet Storm
310928 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() The kref_put() function will call nport->release if the … CWE-416
 Use After Free
CVE-2024-49852 2024-10-24 01:14 2024-10-21 Show GitHub Exploit DB Packet Storm
310929 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: crypto: stm32/cryp - call finalize with bh disabled The finalize operation in interrupt mode produce a produces a spinlock recurs… NVD-CWE-noinfo
CVE-2024-47658 2024-10-24 01:14 2024-10-9 Show GitHub Exploit DB Packet Storm
310930 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Why & How] It actually exposes '6' types in enum dmu… CWE-129
 Improper Validation of Array Index
CVE-2024-46871 2024-10-24 01:10 2024-10-9 Show GitHub Exploit DB Packet Storm