Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229941 8.5 危険 The phpMyAdmin Project - phpMyAdmin の libraries/database_interface.lib.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4096 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229942 7.5 危険 Ruby on Rails project - Ruby on Rails における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4094 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
229943 6.8 警告 yourownbux - YourOwnBux の memberstats.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4093 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229944 6.8 警告 source workshop - Web Directory Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4091 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229945 7.5 危険 source workshop - Reciprocal Links Manager の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4086 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229946 4.4 警告 stephenjungels - Plait の plaiter における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4085 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229947 7.5 危険 stash - Stash の admin/login.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-4081 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229948 6.8 警告 stash - Stash における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4080 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229949 7.5 危険 zanfi solutions - Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4074 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229950 7.5 危険 zanfi solutions - Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4073 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311571 8.8 HIGH
Network 		geekcodelab login_as_users Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login As Users: from n/a through 1.4.3. CWE-862
 Missing Authorization 		CVE-2024-43982 2024-11-9 06:11 2024-11-2 Show GitHub Exploit DB Packet Storm
311572 8.8 HIGH
Network 		ayecode geodirectory Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GeoDirectory: fr… CWE-862
 Missing Authorization 		CVE-2024-43981 2024-11-9 06:10 2024-11-2 Show GitHub Exploit DB Packet Storm
311573 8.8 HIGH
Network 		combodo itop Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests on behalf of the server, from a low privileged user. The user portal form manage… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-51740 2024-11-9 06:09 2024-11-6 Show GitHub Exploit DB Packet Storm
311574 9.8 CRITICAL
Network 		didi super-jacoco A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of t… CWE-78
OS Command  		CVE-2024-10919 2024-11-9 06:07 2024-11-7 Show GitHub Exploit DB Packet Storm
311575 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the following issue was discovered: BUG: KMSAN: kernel-i… CWE-908
 Use of Uninitialized Resource 		CVE-2024-50110 2024-11-9 06:05 2024-11-6 Show GitHub Exploit DB Packet Storm
311576 6.1 MEDIUM
Network 		themehigh checkout_field_editor The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘render_review_request_notice’ function in all versions up to… CWE-79
Cross-site Scripting 		CVE-2024-8499 2024-11-9 06:01 2024-10-4 Show GitHub Exploit DB Packet Storm
311577 6.5 MEDIUM
Network 		eclipse jetty There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending cra… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-8184 2024-11-9 06:00 2024-10-15 Show GitHub Exploit DB Packet Storm
311578 9.8 CRITICAL
Network 		kubernetes image_builder A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmo… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-9486 2024-11-9 05:56 2024-10-16 Show GitHub Exploit DB Packet Storm
311579 5.5 MEDIUM
Local 		avg
avast 		antivirus An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing. CWE-476
 NULL Pointer Dereference 		CVE-2024-9484 2024-11-9 05:55 2024-10-4 Show GitHub Exploit DB Packet Storm
311580 5.5 MEDIUM
Local 		avg
avast 		antivirus A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application dur… CWE-476
 NULL Pointer Dereference 		CVE-2024-9483 2024-11-9 05:54 2024-10-4 Show GitHub Exploit DB Packet Storm