Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251751 6.4 警告 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-0232 2012-03-19 13:56 2012-01-31 Show GitHub Exploit DB Packet Storm
251752 10 危険 General Electric Company - GE Intelligent Platforms Proficy Plant Applications におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2012-0231 2012-03-19 13:53 2012-01-31 Show GitHub Exploit DB Packet Storm
251753 10 危険 General Electric Company - GE Intelligent Platforms Proficy Plant Applications におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-0230 2012-03-19 13:51 2012-01-31 Show GitHub Exploit DB Packet Storm
251754 10 危険 General Electric Company - GE Intelligent Platforms Proficy Historian におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-0229 2012-03-19 13:45 2012-01-31 Show GitHub Exploit DB Packet Storm
251755 4.3 警告 株式会社ジェーン - Janetter におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1236 2012-03-19 12:02 2012-03-19 Show GitHub Exploit DB Packet Storm
251756 4.3 警告 株式会社ジェーン - Janetter における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2012-0328 2012-03-19 12:02 2012-03-19 Show GitHub Exploit DB Packet Storm
251757 9.3 危険 シスコシステムズ - Cisco ASA 5500 series デバイスとそのソフトウェアにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0358 2012-03-16 15:57 2012-03-14 Show GitHub Exploit DB Packet Storm
251758 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0356 2012-03-16 15:56 2012-03-14 Show GitHub Exploit DB Packet Storm
251759 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0355 2012-03-16 15:55 2012-03-14 Show GitHub Exploit DB Packet Storm
251760 7.1 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0354 2012-03-16 15:54 2012-03-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311471 - - - Missing Authorization vulnerability in ??????? ????? Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6. CWE-862
 Missing Authorization
CVE-2024-43219 2024-11-6 07:15 2024-11-2 Show GitHub Exploit DB Packet Storm
311472 9.8 CRITICAL
Network
lb-link bl-wr1300h_firmware LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable. CWE-798
 Use of Hard-coded Credentials
CVE-2024-51431 2024-11-6 06:37 2024-11-2 Show GitHub Exploit DB Packet Storm
311473 7.5 HIGH
Network
tp-link mr200_firmware TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which … CWE-476
 NULL Pointer Dereference
CVE-2024-22733 2024-11-6 06:35 2024-11-2 Show GitHub Exploit DB Packet Storm
311474 - - - A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a CRLF injection attack d… - CVE-2024-47224 2024-11-6 06:35 2024-10-22 Show GitHub Exploit DB Packet Storm
311475 5.3 MEDIUM
Network
vmware spring_framework The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields no… NVD-CWE-noinfo
CVE-2024-38820 2024-11-6 06:35 2024-10-18 Show GitHub Exploit DB Packet Storm
311476 - - - Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component. - CVE-2024-24510 2024-11-6 06:35 2024-09-10 Show GitHub Exploit DB Packet Storm
311477 8.8 HIGH
Network
esafenet cdg A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService… CWE-89
SQL Injection
CVE-2024-10500 2024-11-6 06:02 2024-10-30 Show GitHub Exploit DB Packet Storm
311478 9.8 CRITICAL
Network
draytek vigor3900_firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the restore function. CWE-78
OS Command 
CVE-2024-51252 2024-11-6 05:54 2024-11-2 Show GitHub Exploit DB Packet Storm
311479 - - - Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configur… - CVE-2023-6728 2024-11-6 05:35 2024-10-17 Show GitHub Exploit DB Packet Storm
311480 - - - Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_gis_fence.php. - CVE-2024-45918 2024-11-6 05:35 2024-10-9 Show GitHub Exploit DB Packet Storm