Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254471	4.3	警告	Beijing Rising International Software シマンテック Norman クイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1421	2012-03-26 11:35	2012-03-21	Show	GitHub Exploit DB Packet Storm

254472	4.3	警告	ESET K7 Computing Norman Beijing Rising International Software FRISK Software International クイックヒール・テクノロジーズ・ジャパン株式会社フォーティネットマイクロソフト Panda Security カスペルスキー Authentium	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1420	2012-03-26 11:35	2012-03-21	Show	GitHub Exploit DB Packet Storm

254473	4.3	警告	ClamAV クイックヒール・テクノロジーズ・ジャパン株式会社	-	ClamAV および Quick Heal の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1419	2012-03-26 11:34	2012-03-21	Show	GitHub Exploit DB Packet Storm

254474	4.3	警告	Beijing Rising International Software ESET	-	NOD32 Antivirus および Rising Antivirus の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1449	2012-03-23 18:10	2012-03-21	Show	GitHub Exploit DB Packet Storm

254475	4.3	警告	Beijing Rising International Software Panda Security フォーティネットアラジン	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1445	2012-03-23 18:09	2012-03-21	Show	GitHub Exploit DB Packet Storm

254476	4.3	警告	Beijing Rising International Software Panda Security フォーティネットアラジン	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1439	2012-03-23 18:07	2012-03-21	Show	GitHub Exploit DB Packet Storm

254477	4.3	警告	ウェブルート株式会社アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1441	2012-03-23 18:06	2012-03-21	Show	GitHub Exploit DB Packet Storm

254478	4.3	警告	フォーティネット Panda Security Norman アラジン CA Technologies	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1440	2012-03-23 18:05	2012-03-21	Show	GitHub Exploit DB Packet Storm

254479	4.3	警告	Comodo ソフォス	-	Comodo Antivirus および Sophos Anti-Virus の Microsoft Office ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1438	2012-03-23 18:00	2012-03-21	Show	GitHub Exploit DB Packet Storm

254480	4.3	警告	Comodo	-	複数の製品の Microsoft Office ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1437	2012-03-23 17:55	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319021	6.5	MEDIUM Network	mmrs151	daily_prayer_time	The Daily Prayer Time plugin for WordPress is vulnerable to SQL Injection via the 'max_word' attribute of the 'quran_verse' shortcode in all versions up to, and including, 2024.08.26 due to insuffici…	CWE-89 SQL Injection	CVE-2024-8621	2024-10-3 01:10	2024-09-25	Show	GitHub Exploit DB Packet Storm

319022	6.1	MEDIUM Network	xtendify	simple_calendar	The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versio…	CWE-79 Cross-site Scripting	CVE-2024-8549	2024-10-3 01:04	2024-09-25	Show	GitHub Exploit DB Packet Storm

319023	6.1	MEDIUM Network	ellevo	ellevo	A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL.	CWE-79 Cross-site Scripting	CVE-2024-46655	2024-10-3 00:40	2024-09-26	Show	GitHub Exploit DB Packet Storm

319024	5.3	MEDIUM Adjacent	synology	active_backup_for_business_agent	Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credent…	CWE-311 Missing Encryption of Sensitive Data	CVE-2023-52950	2024-10-3 00:26	2024-09-26	Show	GitHub Exploit DB Packet Storm

319025	5.5	MEDIUM Local	synology	active_backup_for_business_agent	Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential …	CWE-306 Missing Authentication for Critical Function	CVE-2023-52949	2024-10-3 00:26	2024-09-26	Show	GitHub Exploit DB Packet Storm

319026	5.0	MEDIUM Local	synology	active_backup_for_business_agent	Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecifie…	CWE-311 Missing Encryption of Sensitive Data	CVE-2023-52948	2024-10-3 00:26	2024-09-26	Show	GitHub Exploit DB Packet Storm

319027	3.3	LOW Local	synology	active_backup_for_business_agent	Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecifi…	CWE-306 Missing Authentication for Critical Function	CVE-2023-52947	2024-10-3 00:26	2024-09-26	Show	GitHub Exploit DB Packet Storm

319028	5.5	MEDIUM Local	opentext	identity_manager_azuread_driver	A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This impacts all versions before 5.1.4.0	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2021-22518	2024-10-3 00:10	2024-09-12	Show	GitHub Exploit DB Packet Storm

319029	7.5	HIGH Network	netiq	identity_manager_rest_driver	Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Manager REST Driver. This impact version before 1.1.2.0200.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2022-26322	2024-10-3 00:03	2024-09-12	Show	GitHub Exploit DB Packet Storm

319030	9.8	CRITICAL Network	rockwellautomation	factorytalk_batch_view	CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impers…	NVD-CWE-noinfo	CVE-2024-45823	2024-10-2 23:49	2024-09-13	Show	GitHub Exploit DB Packet Storm