Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250421 4.3 警告 Pligg - Pligg CMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5023 2012-01-5 10:17 2011-12-29 Show GitHub Exploit DB Packet Storm
250422 7.5 危険 Pligg - Pligg CMS の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5022 2012-01-5 10:16 2011-12-29 Show GitHub Exploit DB Packet Storm
250423 4.3 警告 Winn GuestBook - Winn GuestBook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5026 2012-01-5 10:16 2011-12-27 Show GitHub Exploit DB Packet Storm
250424 7.5 危険 PHPIDS - PHPIDS におけるルールセット回避の脆弱性 CWE-94
コード・インジェクション 		CVE-2011-5021 2012-01-5 10:15 2011-12-29 Show GitHub Exploit DB Packet Storm
250425 5 警告 GoAhead Software, Inc. - GoAhead WebServer におけるサービス運用妨害 (デーモン停止) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5111 2012-01-5 10:13 2011-12-27 Show GitHub Exploit DB Packet Storm
250426 5 警告 DHTTPD - dhttpd におけるサービス運用妨害 (デーモン停止) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5110 2012-01-5 10:13 2011-12-27 Show GitHub Exploit DB Packet Storm
250427 5 警告 Apache Software Foundation - Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4084 2012-01-4 16:50 2011-12-30 Show GitHub Exploit DB Packet Storm
250428 5 警告 Google - Google V8 におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5037 2012-01-4 16:48 2011-12-30 Show GitHub Exploit DB Packet Storm
250429 5 警告 Christian Neukirchen - Rack におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5036 2012-01-4 16:48 2011-12-30 Show GitHub Exploit DB Packet Storm
250430 7.8 危険 Apache Software Foundation - Apache Geronimo におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5034 2012-01-4 16:47 2011-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312881 - - - Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function. - CVE-2023-37226 2024-09-11 01:35 2024-09-10 Show GitHub Exploit DB Packet Storm
312882 - - - An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint. - CVE-2024-42759 2024-09-11 01:35 2024-09-10 Show GitHub Exploit DB Packet Storm
312883 - - - Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook r… - CVE-2024-45393 2024-09-11 00:50 2024-09-11 Show GitHub Exploit DB Packet Storm
312884 - - - Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. … CWE-285
Improper Authorization 		CVE-2024-45044 2024-09-11 00:50 2024-09-11 Show GitHub Exploit DB Packet Storm
312885 - - - MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 versio… - CVE-2024-8654 2024-09-11 00:50 2024-09-10 Show GitHub Exploit DB Packet Storm
312886 - - - phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php. - CVE-2024-44867 2024-09-11 00:50 2024-09-10 Show GitHub Exploit DB Packet Storm
312887 4.3 MEDIUM
Network 		oretnom23 food_ordering_management_system A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the com… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2024-8558 2024-09-11 00:50 2024-09-8 Show GitHub Exploit DB Packet Storm
312888 5.4 MEDIUM
Network 		oretnom23 online_bank_management_system A vulnerability was found in SourceCodester Online Bank Management System and Online Bank Management System - 1.0. It has been classified as problematic. This affects an unknown part of the file /mfe… CWE-79
Cross-site Scripting 		CVE-2024-8583 2024-09-11 00:49 2024-09-9 Show GitHub Exploit DB Packet Storm
312889 6.1 MEDIUM
Network 		oretnom23 food_ordering_management_system A vulnerability was found in SourceCodester Food Ordering Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipul… CWE-79
Cross-site Scripting 		CVE-2024-8582 2024-09-11 00:48 2024-09-9 Show GitHub Exploit DB Packet Storm
312890 8.1 HIGH
Network 		totolink t8_firmware A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This vulnerability affects unknown code of the file /etc/shadow.sample. The manipulation leads to use of … CWE-259
Use of Hard-coded Password  		CVE-2024-8580 2024-09-11 00:47 2024-09-9 Show GitHub Exploit DB Packet Storm