Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 6.8 警告 シスコシステムズ - Cisco Unified MeetingPlace のサーバにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-1128 2013-02-22 12:14 2013-02-11 Show GitHub Exploit DB Packet Storm
228692 2.6 注意 IBM - IBM WebSphere Message Broker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0466 2013-02-21 18:37 2013-02-19 Show GitHub Exploit DB Packet Storm
228693 3.5 注意 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0457 2013-02-21 18:36 2013-02-15 Show GitHub Exploit DB Packet Storm
228694 6.5 警告 IBM - 複数の IBM 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6357 2013-02-21 18:36 2013-02-15 Show GitHub Exploit DB Packet Storm
228695 6.5 警告 IBM - 複数の IBM 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6356 2013-02-21 18:35 2013-02-15 Show GitHub Exploit DB Packet Storm
228696 6.5 警告 IBM - 複数の IBM 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6355 2013-02-21 18:34 2013-02-15 Show GitHub Exploit DB Packet Storm
228697 4.3 警告 IBM - IBM WebSphere Message Broker におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5953 2013-02-21 18:34 2013-02-12 Show GitHub Exploit DB Packet Storm
228698 5 警告 IBM - IBM WebSphere Message Broker における認証されていないメッセージの送信を誘発される脆弱性 CWE-287
不適切な認証 		CVE-2012-5952 2013-02-21 18:33 2013-02-12 Show GitHub Exploit DB Packet Storm
228699 3.5 注意 IBM - IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5941 2013-02-21 18:29 2013-02-20 Show GitHub Exploit DB Packet Storm
228700 4.3 警告 IBM - IBM Netezza の WebAdmin アプリケーションにおける認証情報を発見される脆弱性 CWE-287
不適切な認証 		CVE-2012-5940 2013-02-21 18:28 2013-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319421 - - - Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - CVE-2024-8904 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319422 - - - Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages r… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-46982 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319423 - - - Vite a frontend build tooling framework for javascript. Affected versions of vite were discovered to contain a DOM Clobbering vulnerability when building scripts to `cjs`/`iife`/`umd` output format. … CWE-79
Cross-site Scripting 		CVE-2024-45812 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319424 - - - Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. `@fs` denies access to files outside of Vite serving allow… CWE-200
CWE-284
Information Exposure
Improper Access Control 		CVE-2024-45811 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319425 - - - arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. The `arduino-esp32` CI is vulnerable to multiple Poisoned Pipeline Execution (PPE… CWE-94
CWE-20
CWE-78
Code Injection
 Improper Input Validation 
OS Command  		CVE-2024-45798 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319426 - - - Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a … - CVE-2024-42503 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319427 - - - Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underly… - CVE-2024-42502 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319428 - - - An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system… - CVE-2024-42501 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319429 - - - A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vllm JSON web API can lead to a Denial of Service (DoS). The API used for LLM-base… CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-8939 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm
319430 - - - A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service. CWE-617
 Reachable Assertion 		CVE-2024-8768 2024-09-20 21:30 2024-09-18 Show GitHub Exploit DB Packet Storm