Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248721 7.5 危険 Wendy - Drupal 用 Counter モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2718 2012-06-26 13:44 2012-05-30 Show GitHub Exploit DB Packet Storm
248722 6.8 警告 David Stosik - Drupal 用 Comment Moderation モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2716 2012-06-26 13:43 2012-05-30 Show GitHub Exploit DB Packet Storm
248723 4.3 警告 OpenStack - OpenStack の EC2 および OS API におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2654 2012-06-26 13:42 2012-06-21 Show GitHub Exploit DB Packet Storm
248724 5 警告 ターボリナックス
レッドハット		 - ImageMagick の TIFF タグの取り扱いにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2005-0759 2012-06-26 12:28 2005-03-23 Show GitHub Exploit DB Packet Storm
248725 7.5 危険 サイバートラスト株式会社
ターボリナックス
レッドハット		 - ImageMagick の不正なファイル名の処理によるフォーマットストリングの脆弱性 - CVE-2005-0397 2012-06-26 12:26 2005-03-3 Show GitHub Exploit DB Packet Storm
248726 10 危険 サイバートラスト株式会社
ターボリナックス
レッドハット		 - ImageMagick の不正な EXIF ファイルの処理によるバッファオーバーフローの脆弱性 - CVE-2004-0981 2012-06-26 12:23 2004-10-27 Show GitHub Exploit DB Packet Storm
248727 10 危険 xmlsoft.org
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
オラクル
レッドハット		 - libxml2 の xmlParseAttValueComplex 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3529 2012-06-26 11:05 2008-09-1 Show GitHub Exploit DB Packet Storm
248728 2.1 注意 w1.fi - hostapd における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2389 2012-06-25 16:49 2012-06-21 Show GitHub Exploit DB Packet Storm
248729 7.5 危険 The Document Foundation
OpenOffice.org Project		 - OpenOffice.org および LibreOffice の vclmi.dll モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-1149 2012-06-25 16:47 2012-05-16 Show GitHub Exploit DB Packet Storm
248730 6.2 警告 CITI - libgssapi および libgssglue における信頼されていない設定ファイルをロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2709 2012-06-25 16:38 2012-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315711 5.4 MEDIUM
Network 		rems online_timesheet_app A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the compone… CWE-79
Cross-site Scripting 		CVE-2024-9320 2024-10-1 22:28 2024-09-29 Show GitHub Exploit DB Packet Storm
315712 2.9 LOW
Physics 		opensc_project
redhat 		opensc
enterprise_linux 		A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using… CWE-787
 Out-of-bounds Write 		CVE-2024-8443 2024-10-1 22:15 2024-09-10 Show GitHub Exploit DB Packet Storm
315713 5.4 MEDIUM
Network 		mayurik free_and_open_source_inventory_management_system A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/ad… CWE-79
Cross-site Scripting 		CVE-2024-9323 2024-10-1 21:55 2024-09-29 Show GitHub Exploit DB Packet Storm
315714 9.8 CRITICAL
Network 		endress echo_curve_viewer
fieldcare_sfe500_package
field_xpert_smt79_firmware
field_xpert_smt77_firmware
field_xpert_smt70_firmware
field_xpert_smt50_firmware 		An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context. CWE-94
Code Injection 		CVE-2024-6596 2024-10-1 21:26 2024-09-10 Show GitHub Exploit DB Packet Storm
315715 9.8 CRITICAL
Network 		openfga openfga OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when calling Check API with a model that uses `but not` and `from` expressions and a us… CWE-863
 Incorrect Authorization 		CVE-2024-42473 2024-10-1 21:21 2024-08-12 Show GitHub Exploit DB Packet Storm
315716 9.8 CRITICAL
Network 		mayurik advocate_office_management_system A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /control/forgot_pass.php. The manipu… CWE-89
SQL Injection 		CVE-2024-9296 2024-10-1 20:36 2024-09-28 Show GitHub Exploit DB Packet Storm
315717 9.8 CRITICAL
Network 		mayurik advocate_office_management_system A vulnerability was found in SourceCodester Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /control/login.php. The manipulati… CWE-89
SQL Injection 		CVE-2024-9295 2024-10-1 20:36 2024-09-28 Show GitHub Exploit DB Packet Storm
315718 9.8 CRITICAL
Network 		mayurik advocate_office_management_system A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/edit_client.php. The … CWE-89
SQL Injection 		CVE-2024-9328 2024-10-1 20:34 2024-09-30 Show GitHub Exploit DB Packet Storm
315719 5.4 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 9.11.x <= 9.11.0, 9.10.x <= 9.10.1, 9.9.x <= 9.9.2 and 9.5.x <= 9.5.8 fail to properly authorize requests when viewing archived channels is disabled, which allows an attacker to r… NVD-CWE-noinfo
CVE-2024-42406 2024-10-1 20:15 2024-09-26 Show GitHub Exploit DB Packet Storm
315720 4.4 MEDIUM
Local 		codesys oscat_basic_library Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service. CWE-125
Out-of-bounds Read 		CVE-2024-6876 2024-10-1 16:15 2024-09-11 Show GitHub Exploit DB Packet Storm