Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
210811	6.5	警告	Jexperts	-	JExperts Channel Platform におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8558	2014-11-27 14:46	2014-10-27	Show	GitHub Exploit DB Packet Storm

210812	4.3	警告	IBM	-	IBM Web Experience Factory におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-6196	2014-11-27 14:45	2014-11-12	Show	GitHub Exploit DB Packet Storm

210813	3.5	注意	IBM	-	IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-6093	2014-11-27 14:45	2014-11-21	Show	GitHub Exploit DB Packet Storm

210814	9	危険	デル	-	複数の Dell SonicWALL 製品の ViewPoint Web アプリケーションにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2014-8420	2014-11-27 14:37	2014-11-21	Show	GitHub Exploit DB Packet Storm

210815	9	危険	アルバネットワークス株式会社	-	Aruba Networks AirWave の Web インターフェースにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8368	2014-11-27 14:28	2014-11-19	Show	GitHub Exploit DB Packet Storm

210816	7.5	危険	アルバネットワークス株式会社	-	Aruba Networks ClearPass Policy Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-8367	2014-11-27 14:27	2014-11-19	Show	GitHub Exploit DB Packet Storm

210817	7.2	危険	Canonical	-	Ubuntu で使用される mountall におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1421	2014-11-27 13:49	2014-11-18	Show	GitHub Exploit DB Packet Storm

210818	4.7	警告	Linux	-	Linux Kernel の fs/udf/inode.c の __udf_read_inode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-6410	2014-11-26 18:04	2014-09-4	Show	GitHub Exploit DB Packet Storm

210819	2.3	注意	Linux	-	Linux kernel の drivers/target/target_core_rd.c 内の rd_build_device_space 関数における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4027	2014-11-26 18:02	2014-01-19	Show	GitHub Exploit DB Packet Storm

210820	7.2	危険	Fabrice Bellard	-	QEMU の hw/ide/core.c における脆弱性	CWE-189 数値処理の問題	CVE-2014-2894	2014-11-26 17:54	2014-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251731	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() The SJA1105 family has 45 L2 policing table entries (…	CWE-787 Out-of-bounds Write	CVE-2022-48980	2024-10-26 03:36	2024-10-22	Show	GitHub Exploit DB Packet Storm

251732	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove errant put in error path drm_gem_shmem_mmap() doesn't own this reference, resulting in the GEM object ge…	CWE-416 Use After Free	CVE-2022-48981	2024-10-26 03:33	2024-10-22	Show	GitHub Exploit DB Packet Storm

251733	8.1	HIGH Network	microsoft	windows_server_2012 windows_10_1507 windows_server_2016 windows_server_2022_23h2 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_10_1607 windows_server_2019 windows…	Windows MSHTML Platform Spoofing Vulnerability	NVD-CWE-noinfo	CVE-2024-43573	2024-10-26 03:17	2024-10-9	Show	GitHub Exploit DB Packet Storm

251734	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10_1507 windows_server_2016 windows_server_2022_23h2 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_10_1607 windows…	Microsoft Management Console Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-43572	2024-10-26 03:17	2024-10-9	Show	GitHub Exploit DB Packet Storm

251735	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause the suspend notifier to be regis…	NVD-CWE-noinfo	CVE-2022-48982	2024-10-26 03:12	2024-10-22	Show	GitHub Exploit DB Packet Storm

251736	-		-	-	In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution …	-	CVE-2024-44098	2024-10-26 02:35	2024-10-25	Show	GitHub Exploit DB Packet Storm

251737	-		-	-	Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them t…	-	CVE-2023-48082	2024-10-26 02:15	2024-10-15	Show	GitHub Exploit DB Packet Storm

251738	8.1	HIGH Network	google	chrome	Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High)	NVD-CWE-noinfo	CVE-2024-10229	2024-10-26 02:04	2024-10-23	Show	GitHub Exploit DB Packet Storm

251739	9.8	CRITICAL Network	keith-cullen	freecoap	Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a s…	CWE-476 NULL Pointer Dereference	CVE-2024-40493	2024-10-26 02:01	2024-10-23	Show	GitHub Exploit DB Packet Storm

251740	8.8	HIGH Network	google	chrome	Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)	CWE-843 Type Confusion	CVE-2024-10231	2024-10-26 02:01	2024-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed