Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247421 7.5 危険 アドビシステムズ - Adobe ColdFusion における CFC メソッドを呼び出される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1656 2012-06-26 16:02 2008-04-8 Show GitHub Exploit DB Packet Storm
247422 9.3 危険 chilkat software - ChilkatHttp.dll の ChilkatHttp.ChilkatHttp.1 ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1647 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247423 7.5 危険 arnos toolbox
WordPress.org		 - WordPress の WP-Download プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1646 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247424 7.5 危険 efestech - EfesTECH Video の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1641 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247425 7.5 危険 emedia office gmbh - CuteFlow における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1632 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247426 7.5 危険 emedia office gmbh - CuteFlow の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1631 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247427 4.3 警告 emedia office gmbh - CuteFlow におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1630 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247428 3.5 注意 cds software consortium - CDS Invenio における任意のユーザの電子メール通知アラートを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1627 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247429 7.5 危険 eggblog - eggBlog における SQL インジェクションの脆弱性 CWE-20
CWE-89
CVE-2008-1626 2012-06-26 16:02 2008-03-28 Show GitHub Exploit DB Packet Storm
247430 6.8 警告 AVAST Software s.r.o. - avast! Home and Professional の aavmker4.sys における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1625 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313861 6.5 MEDIUM
Network 		sap businessobjects_business_intelligence SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine host… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-37179 2024-11-15 02:35 2024-10-8 Show GitHub Exploit DB Packet Storm
313862 5.4 MEDIUM
Network 		sap commerce_backoffice SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact… CWE-79
Cross-site Scripting 		CVE-2024-45278 2024-11-15 02:17 2024-10-8 Show GitHub Exploit DB Packet Storm
313863 4.8 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds CWE-294
Authentication Bypass by Capture-replay  		CVE-2024-36250 2024-11-15 02:11 2024-11-10 Show GitHub Exploit DB Packet Storm
313864 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fsdax: dax_unshare_iter needs to copy entire blocks The code that copies data from srcmap to iomap in dax_unshare_iter is very ve… NVD-CWE-noinfo
CVE-2024-50250 2024-11-15 02:04 2024-11-9 Show GitHub Exploit DB Packet Storm
313865 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Make rmw_lock a raw_spin_lock The following BUG was triggered: ============================= [ BUG: Invalid wait con… NVD-CWE-noinfo
CVE-2024-50249 2024-11-15 02:01 2024-11-9 Show GitHub Exploit DB Packet Storm
313866 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisati… CWE-476
 NULL Pointer Dereference 		CVE-2024-50239 2024-11-15 01:59 2024-11-9 Show GitHub Exploit DB Packet Storm
313867 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") r… CWE-476
 NULL Pointer Dereference 		CVE-2024-50238 2024-11-15 01:58 2024-11-9 Show GitHub Exploit DB Packet Storm
313868 4.3 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 and 10.0.x <= 10.0.0 fail to properly authorize the requests to /api/v4/channels  which allows a User or System Manager, with "R… CWE-863
 Incorrect Authorization 		CVE-2024-42000 2024-11-15 01:48 2024-11-10 Show GitHub Exploit DB Packet Storm
313869 4.3 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 10.0.x <= 10.0.0 and 9.11.x <= 9.11.2 fail to properly query ElasticSearch when searching for the channel name in channel switcher which allows an attacker to get private channels… NVD-CWE-noinfo
CVE-2024-52032 2024-11-15 01:47 2024-11-10 Show GitHub Exploit DB Packet Storm
313870 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4_copy earlier Ensure the refcount and async_copies fields are initialized early. cleanup_async_copy(… CWE-908
 Use of Uninitialized Resource 		CVE-2024-50241 2024-11-15 01:45 2024-11-9 Show GitHub Exploit DB Packet Storm