Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230841 4.3 警告 ZyXEL - ZyXEL P-330W ルータの Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6729 2012-12-20 18:34 2009-09-10 Show GitHub Exploit DB Packet Storm
230842 6.8 警告 webportal - WebPortal CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0142 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230843 7.5 危険 webportal - WebPortal CMS の actions.php における任意のアカウントへのアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0141 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230844 6.4 警告 uebimiau - Uebimiau Webmail の error.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0140 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230845 7.5 危険 snetworks - SNETWORKS PHP CLASSIFIEDS の config.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0137 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230846 5 警告 snitz forums 2000 - Snitz Forums 2000 における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0136 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230847 5 警告 snitz forums 2000 - Snitz Forums 2000 におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0135 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230848 4.3 警告 snitz forums 2000 - Snitz Forums 2000 の Forums/setup.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0134 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230849 7.5 危険 thomas perez - Tribisur における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0133 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230850 5 警告 pragma systems - Pragma FortressSSH におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-0132 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312491 7.2 HIGH
Network 		hitachienergy tro610_firmware
tro620_firmware
tro670_firmware 		Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the we… CWE-77
Command Injection 		CVE-2024-41153 2024-10-31 23:37 2024-10-29 Show GitHub Exploit DB Packet Storm
312492 5.5 MEDIUM
Local 		cisco ata_191_firmware
ata_192_firmware 		A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter firmware could allow an authenticated, local attacker with low privileges to view … CWE-522
 Insufficiently Protected Credentials 		CVE-2024-20462 2024-10-31 23:35 2024-10-17 Show GitHub Exploit DB Packet Storm
312493 8.8 HIGH
Network 		cisco ata_191_firmware
ata_192_firmware 		A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with low privileges to run commands as an… NVD-CWE-Other
CVE-2024-20420 2024-10-31 23:35 2024-10-17 Show GitHub Exploit DB Packet Storm
312494 6.1 MEDIUM
Network 		cisco ata_191_firmware
ata_192_firmware 		A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site scrip… NVD-CWE-Other
CVE-2024-20460 2024-10-31 23:35 2024-10-17 Show GitHub Exploit DB Packet Storm
312495 6.5 MEDIUM
Network 		cisco ata_191_firmware
ata_192_firmware 		A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… CWE-352
 Origin Validation Error 		CVE-2024-20421 2024-10-31 23:35 2024-10-17 Show GitHub Exploit DB Packet Storm
312496 - - - A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. … - CVE-2024-20466 2024-10-31 23:35 2024-08-22 Show GitHub Exploit DB Packet Storm
312497 - - - Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing keys to c006Frrupt the return address, caus… - CVE-2021-46746 2024-10-31 23:35 2024-08-14 Show GitHub Exploit DB Packet Storm
312498 5.3 MEDIUM
Network 		mozilla thunderbird
firefox 		The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, an… NVD-CWE-noinfo
CVE-2024-10460 2024-10-31 23:32 2024-10-29 Show GitHub Exploit DB Packet Storm
312499 6.5 MEDIUM
Network 		openc3 cosmos OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's open_local_file method all… CWE-22
Path Traversal 		CVE-2024-46977 2024-10-31 23:15 2024-10-3 Show GitHub Exploit DB Packet Storm
312500 6.1 MEDIUM
Network 		openc3 cosmos OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting (XSS) vulnera… CWE-79
Cross-site Scripting 		CVE-2024-43795 2024-10-31 23:15 2024-10-3 Show GitHub Exploit DB Packet Storm