Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228371 4 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0572 2013-02-28 18:02 2013-01-15 Show GitHub Exploit DB Packet Storm
228372 6.5 警告 MariaDB Corporation Ab.
オラクル		 - Oracle MySQL および MariaDB におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5612 2013-02-28 18:00 2012-12-3 Show GitHub Exploit DB Packet Storm
228373 5 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1702 2013-02-28 18:00 2013-01-15 Show GitHub Exploit DB Packet Storm
228374 7.5 危険 FFmpeg - FFmpeg の libavcodec におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2013-2276 2013-02-28 14:42 2013-02-27 Show GitHub Exploit DB Packet Storm
228375 10 危険 Nuance Communications - Nuance 製品に脆弱性 CWE-119
バッファエラー 		CVE-2013-0113 2013-02-28 14:18 2013-02-8 Show GitHub Exploit DB Packet Storm
228376 4.3 警告 bayashi.net - dopvSTAR* におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0709 2013-02-28 12:02 2013-02-28 Show GitHub Exploit DB Packet Storm
228377 4.3 警告 bayashi.net - dopvCOMET* におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0708 2013-02-28 12:01 2013-02-28 Show GitHub Exploit DB Packet Storm
228378 6.5 警告 IBM - IBM System Storage TS3500 テープ・ライブラリーの Web インタフェースにおける権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-5767 2013-02-28 11:29 2013-02-22 Show GitHub Exploit DB Packet Storm
228379 4 警告 シスコシステムズ - Cisco Cloud Portal の nsAPI インタフェースにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1139 2013-02-28 10:52 2013-02-25 Show GitHub Exploit DB Packet Storm
228380 7.8 危険 デル - Dell PowerConnect 6248P にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0120 2013-02-27 16:51 2013-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319191 9.8 CRITICAL
Network 		templateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce W… CWE-89
SQL Injection 		CVE-2024-43917 2024-09-20 06:46 2024-08-30 Show GitHub Exploit DB Packet Storm
319192 9.8 CRITICAL
Network 		nitropack nitropack Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc. NitroPack allows Code Injection.This issue affects NitroPack: from n/a through 1.16.7. CWE-94
Code Injection 		CVE-2024-43922 2024-09-20 06:44 2024-08-30 Show GitHub Exploit DB Packet Storm
319193 8.8 HIGH
Adjacent 		dlink covr-x1870_firmware
dir-x4860_firmware 		Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded… CWE-912
 Hidden Functionality 		CVE-2024-45696 2024-09-20 06:42 2024-09-16 Show GitHub Exploit DB Packet Storm
319194 9.8 CRITICAL
Network 		dlink dir-x4860_firmware Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS comm… CWE-912
 Hidden Functionality 		CVE-2024-45697 2024-09-20 06:40 2024-09-16 Show GitHub Exploit DB Packet Storm
319195 9.8 CRITICAL
Network 		pluck-cms pluck Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-43042 2024-09-20 06:01 2024-08-17 Show GitHub Exploit DB Packet Storm
319196 8.8 HIGH
Network 		nuxt nuxt Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insufficient validation of the `path` parameter in the NuxtTestComponentWrapper, an… CWE-94
Code Injection 		CVE-2024-34344 2024-09-20 05:58 2024-08-6 Show GitHub Exploit DB Packet Storm
319197 7.5 HIGH
Network 		nuxt nuxt Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. `nuxt/icon` provides an API to allow client side icon lookup. This endpoint is at `/api/_nuxt_… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-42352 2024-09-20 05:55 2024-08-6 Show GitHub Exploit DB Packet Storm
319198 7.8 HIGH
Local 		mongodb mongodb
c_driver
php_driver 		Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing… NVD-CWE-noinfo
CVE-2024-7553 2024-09-20 05:46 2024-08-7 Show GitHub Exploit DB Packet Storm
319199 6.1 MEDIUM
Network 		mailcow mailcow\ mailcow: dockerized is an open source groupware/email suite based on docker. An unauthenticated attacker can inject a JavaScript payload into the API logs. This payload is executed whenever the API l… CWE-79
Cross-site Scripting 		CVE-2024-41959 2024-09-20 05:14 2024-08-6 Show GitHub Exploit DB Packet Storm
319200 4.8 MEDIUM
Network 		mailcow mailcow\ mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is ex… CWE-79
Cross-site Scripting 		CVE-2024-41960 2024-09-20 05:01 2024-08-6 Show GitHub Exploit DB Packet Storm