Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249021 4.3 警告 BraveNewCode
WordPress.org		 - WordPress の WPtouch プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4779 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
249022 4.3 警告 Horde - Horde Groupware Webmail Edition のfetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4778 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
249023 7.5 危険 PreProject.com - PreProjects Pre Online Tests Generator Pro の takefreestart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4776 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249024 7.5 危険 AuraCMS - AuraCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4774 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249025 4.3 警告 matteoiammarrone - S-CMS の blocks/lang.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4772 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249026 4 警告 IBM - IBM Tivoli Directory Server (TDS) のプロキシサーバ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4789 2012-03-27 18:42 2010-10-29 Show GitHub Exploit DB Packet Storm
249027 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4788 2012-03-27 18:42 2010-02-10 Show GitHub Exploit DB Packet Storm
249028 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4787 2012-03-27 18:42 2010-06-9 Show GitHub Exploit DB Packet Storm
249029 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4786 2012-03-27 18:42 2010-04-23 Show GitHub Exploit DB Packet Storm
249030 4 警告 IBM - IBM TDS の do_extendedOp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4785 2012-03-27 18:42 2010-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314911 - - - Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the RoleConfigFile initializer and then into the… - CVE-2024-42363 2024-08-21 21:30 2024-08-21 Show GitHub Exploit DB Packet Storm
314912 - - - Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?id=0&list=whitelist&remove=pligg.com - CVE-2024-42619 2024-08-21 21:30 2024-08-21 Show GitHub Exploit DB Packet Storm
314913 9.6 CRITICAL
Network 		- - An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network. CWE-284
Improper Access Control 		CVE-2024-38175 2024-08-21 21:30 2024-08-21 Show GitHub Exploit DB Packet Storm
314914 - - - Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as t… - CVE-2024-6322 2024-08-21 21:30 2024-08-21 Show GitHub Exploit DB Packet Storm
314915 - - - Discourse Placeholder Forms will let you build dynamic documentation. Unsanitized and stored user input was injected in the html of the post. The vulnerability is fixed in commit a62f711d5600e4e5d86f… - CVE-2024-43408 2024-08-21 21:30 2024-08-21 Show GitHub Exploit DB Packet Storm
314916 - - - Improper Access Controls allows backend users to overwrite their username when disallowed. - CVE-2024-27187 2024-08-21 21:30 2024-08-21 Show GitHub Exploit DB Packet Storm
314917 9.8 CRITICAL
Network 		jielink\+_jsotc2016_project jielink\+_jsotc2016 A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the f… NVD-CWE-Other
CVE-2024-7919 2024-08-21 21:30 2024-08-19 Show GitHub Exploit DB Packet Storm
314918 7.2 HIGH
Network 		douco douphp A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822. Affected by this issue is some unknown functionality of the file /admin/system.php of the component F… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7917 2024-08-21 21:30 2024-08-19 Show GitHub Exploit DB Packet Storm
314919 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-7757 2024-08-21 18:15 2024-08-21 Show GitHub Exploit DB Packet Storm
314920 - - - ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete. - CVE-2024-42565 2024-08-21 06:35 2024-08-20 Show GitHub Exploit DB Packet Storm