Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248631 6.8 警告 IBM - IBM WebSphere Application Server の Web Server プラグインにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-2162 2012-05-7 15:56 2012-03-23 Show GitHub Exploit DB Packet Storm
248632 6.4 警告 HTC Corporation - 複数の HTC の Android 上で動作する HTC IQRD サービスにおける SMS メッセージを送信される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2217 2012-05-7 15:54 2012-05-1 Show GitHub Exploit DB Packet Storm
248633 2.1 注意 Mumble - Mumble における平文パスワードおよび設定データを取得される脆弱性 CWE-310
暗号の問題
CVE-2012-0863 2012-05-2 15:17 2012-04-30 Show GitHub Exploit DB Packet Storm
248634 6.5 警告 Digium - Asterisk Open Source および Asterisk Business Edition におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-119
バッファエラー
CVE-2012-2416 2012-05-2 15:14 2012-04-16 Show GitHub Exploit DB Packet Storm
248635 7.5 危険 Google - Google Chrome のプロセス間通信の実装におけるサンドボックスの制限を回避される脆弱性 CWE-362
競合状態
CVE-2011-3080 2012-05-2 14:00 2012-04-30 Show GitHub Exploit DB Packet Storm
248636 10 危険 Google - Google Chrome のプロセス間通信の実装における詳細不明な脆弱性 CWE-399
リソース管理の問題
CVE-2011-3079 2012-05-2 13:57 2012-04-30 Show GitHub Exploit DB Packet Storm
248637 8.5 危険 RuggedCom - RuggedCom の Rugged Operating System (ROS) におけるアクセス権限を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-2441 2012-05-1 14:49 2012-04-27 Show GitHub Exploit DB Packet Storm
248638 7.5 危険 ネットギア - Netgear FVS318N の初期設定に問題 CWE-264
認可・権限・アクセス制御
CVE-2012-2439 2012-05-1 14:05 2012-04-3 Show GitHub Exploit DB Packet Storm
248639 7.5 危険 TP-LINK Technologies - TP-Link 8840T の初期設定に問題 CWE-264
認可・権限・アクセス制御
CVE-2012-2440 2012-05-1 12:21 2012-04-3 Show GitHub Exploit DB Packet Storm
248640 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-2425 2012-04-27 15:48 2012-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314261 6.1 MEDIUM
Network
scriptonite music_request_manager The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform Cross-Site Scripting attacks against ad… CWE-79
Cross-site Scripting
CVE-2024-6019 2024-09-14 01:13 2024-09-12 Show GitHub Exploit DB Packet Storm
314262 4.8 MEDIUM
Network
pega infinity Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name. CWE-79
Cross-site Scripting
CVE-2024-6700 2024-09-14 01:09 2024-09-13 Show GitHub Exploit DB Packet Storm
314263 4.8 MEDIUM
Network
pega infinity Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type. CWE-79
Cross-site Scripting
CVE-2024-6701 2024-09-14 01:08 2024-09-13 Show GitHub Exploit DB Packet Storm
314264 4.8 MEDIUM
Network
pega infinity Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage. CWE-79
Cross-site Scripting
CVE-2024-6702 2024-09-14 01:07 2024-09-13 Show GitHub Exploit DB Packet Storm
314265 4.3 MEDIUM
Adjacent
kasdanet kw5515_firmware Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attackers to execute arbitrary code and steal cookies via a crafted script CWE-79
Cross-site Scripting
CVE-2020-24061 2024-09-14 01:05 2024-09-13 Show GitHub Exploit DB Packet Storm
314266 6.1 MEDIUM
Network
yzane markdown_pdf A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to ini… CWE-79
Cross-site Scripting
CVE-2024-7739 2024-09-14 01:03 2024-08-14 Show GitHub Exploit DB Packet Storm
314267 7.8 HIGH
Local
yzane markdown_pdf A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality of the component Markdown File Handler. T… CWE-22
Path Traversal
CVE-2024-7738 2024-09-14 01:03 2024-08-14 Show GitHub Exploit DB Packet Storm
314268 4.3 MEDIUM
Network
mirapolis lms An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulnerability by manipulating the ID parameter and increment STEP parameter, leading … CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-25270 2024-09-14 01:01 2024-09-13 Show GitHub Exploit DB Packet Storm
314269 9.8 CRITICAL
Network
docker desktop A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. NVD-CWE-noinfo
CVE-2024-8696 2024-09-14 01:01 2024-09-13 Show GitHub Exploit DB Packet Storm
314270 9.8 CRITICAL
Network
docker desktop A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. NVD-CWE-noinfo
CVE-2024-8695 2024-09-14 01:01 2024-09-13 Show GitHub Exploit DB Packet Storm