Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228291 7.5 危険 teraway - Teraway LinkTracker における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1617 2012-12-20 19:10 2009-05-12 Show GitHub Exploit DB Packet Storm
228292 6.8 警告 Canonical - Ubuntu の Ubuntu clamav-milter.init スクリプトにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1601 2012-12-20 19:10 2009-05-4 Show GitHub Exploit DB Packet Storm
228293 9.3 危険 shemes - GrabIt の NZB インポータ機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1586 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
228294 4.4 警告 vocabulary server - TemaTres における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1585 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
228295 6 警告 vocabulary server - TemaTres における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1584 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
228296 4.3 警告 vocabulary server - TemaTres におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1583 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
228297 9.3 危険 ROXIO - Roxio Creator 2010 の Roxio Easy Media Creator における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-1566 2012-12-20 19:10 2009-12-3 Show GitHub Exploit DB Packet Storm
228298 4.3 警告 サン・マイクロシステムズ - Sun GlassFish Enterprise Server などの製品で使用されている Sun Woodstock におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1554 2012-12-20 19:10 2009-05-6 Show GitHub Exploit DB Packet Storm
228299 7.8 危険 SCO - SCO Unixware の IGMP ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1552 2012-12-20 19:10 2009-04-30 Show GitHub Exploit DB Packet Storm
228300 7.5 危険 qt-cute - Qt quickteam における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1551 2012-12-20 19:10 2009-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311031 6.8 MEDIUM
Network 		bitdefender total_security A vulnerability has been identified in the Bitdefender Total Security HTTPS scanning functionality where the product incorrectly checks the site's certificate, which allows an attacker to make MITM S… CWE-295
Improper Certificate Validation  		CVE-2023-49567 2024-10-23 01:39 2024-10-18 Show GitHub Exploit DB Packet Storm
311032 7.4 HIGH
Network 		bitdefender total_security A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found to trust certificat… CWE-295
Improper Certificate Validation  		CVE-2023-6056 2024-10-23 01:38 2024-10-18 Show GitHub Exploit DB Packet Storm
311033 5.4 MEDIUM
Network 		newsignature wp_easy_post_types The WP Easy Post Types plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.4.4 due to insufficient input sanitization and output escapi… CWE-79
Cross-site Scripting 		CVE-2024-10080 2024-10-23 01:27 2024-10-18 Show GitHub Exploit DB Packet Storm
311034 8.8 HIGH
Network 		newsignature wp_easy_post_types The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-10079 2024-10-23 01:27 2024-10-18 Show GitHub Exploit DB Packet Storm
311035 7.4 HIGH
Network 		bitdefender total_security A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software trusts a certificate issued by an entity that isn't authorized to issue certificates.… CWE-295
Improper Certificate Validation  		CVE-2023-49570 2024-10-23 01:26 2024-10-18 Show GitHub Exploit DB Packet Storm
311036 9.8 CRITICAL
Network 		hikvision hikcentral_master There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2024-47485 2024-10-23 01:23 2024-10-18 Show GitHub Exploit DB Packet Storm
311037 5.4 MEDIUM
Network 		gurieveugen\&vitaliyshebela branding The Branding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escapin… CWE-79
Cross-site Scripting 		CVE-2024-9452 2024-10-23 01:23 2024-10-18 Show GitHub Exploit DB Packet Storm
311038 4.7 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check atomic_file in f2fs ioctl interfaces Some f2fs ioctl interfaces like f2fs_ioc_set_pin_file(), f2fs_move_file_r… CWE-362
Race Condition 		CVE-2024-49859 2024-10-23 01:13 2024-10-21 Show GitHub Exploit DB Packet Storm
311039 7.0 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to… CWE-416
 Use After Free 		CVE-2024-49855 2024-10-23 01:12 2024-10-21 Show GitHub Exploit DB Packet Storm
311040 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos In case of malformed relocation record of kind BPF_CORE_TYPE_ID_LOCA… CWE-476
 NULL Pointer Dereference 		CVE-2024-49850 2024-10-23 01:12 2024-10-21 Show GitHub Exploit DB Packet Storm