Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248781 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances 5500 シリーズデバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2012-0378 2012-05-8 11:20 2012-05-3 Show GitHub Exploit DB Packet Storm
248782 5 警告 シスコシステムズ - Cisco Unified Communications Manager の voice-sipstack コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-0376 2012-05-8 11:19 2012-05-3 Show GitHub Exploit DB Packet Storm
248783 4.3 警告 シスコシステムズ - Cisco IOS の拡張 ACL 機能におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0362 2012-05-8 11:18 2012-05-2 Show GitHub Exploit DB Packet Storm
248784 5 警告 シスコシステムズ - Cisco IP Communicator の SCCP プロトコルコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0361 2012-05-8 11:01 2012-05-2 Show GitHub Exploit DB Packet Storm
248785 5 警告 シスコシステムズ - Cisco IOS における任意の IP アドレスからの TELNET 接続を確立される脆弱性 CWE-20
不適切な入力確認
CVE-2012-0339 2012-05-8 10:58 2012-05-2 Show GitHub Exploit DB Packet Storm
248786 5 警告 シスコシステムズ - Cisco IOS における任意の IP アドレスからの SSH 接続を確立される脆弱性 CWE-20
不適切な入力確認
CVE-2012-0338 2012-05-8 10:56 2012-05-2 Show GitHub Exploit DB Packet Storm
248787 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances 5500 シリーズデバイスにおける重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2012-0335 2012-05-8 10:54 2012-05-2 Show GitHub Exploit DB Packet Storm
248788 5 警告 シスコシステムズ - Cisco Small Business IP Phone の SPA 500 シリーズファームウェアにおける電話をかけられる脆弱性 CWE-287
不適切な認証
CVE-2012-0333 2012-05-8 10:39 2012-05-2 Show GitHub Exploit DB Packet Storm
248789 3.5 注意 IBM - IBM Rational AppScan におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0737 2012-05-8 09:55 2012-05-3 Show GitHub Exploit DB Packet Storm
248790 9.3 危険 IBM - IBM Rational AppScan における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-0736 2012-05-8 09:55 2012-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313701 7.5 HIGH
Network
xiaohe4966 tpmecms A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipu… CWE-22
Path Traversal
CVE-2024-8876 2024-09-21 01:58 2024-09-16 Show GitHub Exploit DB Packet Storm
313702 6.7 MEDIUM
Local
cisco identity_services_engine A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system a… CWE-78
OS Command 
CVE-2024-20469 2024-09-21 01:58 2024-09-5 Show GitHub Exploit DB Packet Storm
313703 4.7 MEDIUM
Network
send_project send Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0… CWE-79
Cross-site Scripting
CVE-2024-43799 2024-09-21 01:57 2024-09-11 Show GitHub Exploit DB Packet Storm
313704 8.8 HIGH
Network
qnap qts
quts_hero
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execu… CWE-120
CWE-122
Classic Buffer Overflow
Heap-based Buffer Overflow
CVE-2024-32763 2024-09-21 01:49 2024-09-7 Show GitHub Exploit DB Packet Storm
313705 4.7 MEDIUM
Network
qnap qts
quts_hero
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands … CWE-78
OS Command 
CVE-2024-21906 2024-09-21 01:49 2024-09-7 Show GitHub Exploit DB Packet Storm
313706 9.8 CRITICAL
Network
playsms playsms A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=core_auth&route=forgot&op=forgot … CWE-94
Code Injection
CVE-2024-8880 2024-09-21 01:41 2024-09-16 Show GitHub Exploit DB Packet Storm
313707 7.8 HIGH
Local
qnap qts
quts_hero
A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated users to access data or perfo… CWE-862
 Missing Authorization
CVE-2023-39298 2024-09-21 01:39 2024-09-7 Show GitHub Exploit DB Packet Storm
313708 6.1 MEDIUM
Network
intumit smartrobot_firmware SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting at… CWE-79
Cross-site Scripting
CVE-2024-8776 2024-09-21 01:38 2024-09-16 Show GitHub Exploit DB Packet Storm
313709 2.4 LOW
Adjacent
qnap qts
quts_hero
An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local networ… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2024-32771 2024-09-21 01:38 2024-09-7 Show GitHub Exploit DB Packet Storm
313710 7.5 HIGH
Network
openjsf body-parser body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood th… NVD-CWE-noinfo
CVE-2024-45590 2024-09-21 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm