Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228151	4.3	警告	サイバートラスト株式会社 VMware OpenSSL Project レッドハットオラクル	-	OpenSSL における暗号を強制的に利用される脆弱性	CWE-310 暗号の問題	CVE-2008-7270	2012-12-18 17:31	2010-12-6	Show	GitHub Exploit DB Packet Storm

228152	5	警告	GNU Project VMware	-	GNU C Library の posix/fnmatch.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1659	2012-12-18 17:16	2011-04-8	Show	GitHub Exploit DB Packet Storm

228153	3.7	注意	GNU Project VMware	-	GNU C Library の ld.so における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1658	2012-12-18 17:14	2011-04-8	Show	GitHub Exploit DB Packet Storm

228154	6.2	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の locale/programs/locale.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1095	2012-12-18 17:12	2011-04-4	Show	GitHub Exploit DB Packet Storm

228155	5.1	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library および Embedded GLIBC における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1071	2012-12-18 17:10	2011-04-4	Show	GitHub Exploit DB Packet Storm

228156	6.9	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の elf/dl-object.c における権限を取得される脆弱性	CWE-Other その他	CVE-2011-0536	2012-12-18 17:07	2011-04-4	Show	GitHub Exploit DB Packet Storm

228157	7.2	危険	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の encode_name マクロにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0296	2012-12-18 17:04	2010-06-1	Show	GitHub Exploit DB Packet Storm

228158	5	警告	サイバートラスト株式会社 VMware MIT Kerberos レッドハットオラクル	-	MIT Kerberos 5 の Key Distribution Center におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0282	2012-12-18 16:57	2011-02-8	Show	GitHub Exploit DB Packet Storm

228159	5	警告	サイバートラスト株式会社 VMware MIT Kerberos レッドハットオラクル	-	MIT Kerberos 5 の unparse 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2011-0281	2012-12-18 16:54	2011-02-8	Show	GitHub Exploit DB Packet Storm

228160	3.7	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4450	2012-12-18 16:39	2011-02-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248911	6.5	MEDIUM Network	mongodb	mongodb	prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no prima…	NVD-CWE-Other	CVE-2024-8305	2024-11-8 00:38	2024-10-22	Show	GitHub Exploit DB Packet Storm

248912	6.1	MEDIUM Network	klokantech	maptiler_tileserver_gl	A vulnerability was found in Klokan MapTiler tileserver-gl 2.3.1 and classified as problematic. This issue affects some unknown processing of the component URL Handler. The manipulation of the argume…	CWE-79 Cross-site Scripting	CVE-2024-10503	2024-11-8 00:30	2024-10-30	Show	GitHub Exploit DB Packet Storm

248913	7.5	HIGH Network	nginxui	nginx_ui	Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of …	CWE-22 Path Traversal	CVE-2024-49366	2024-11-8 00:15	2024-10-22	Show	GitHub Exploit DB Packet Storm

248914	7.5	HIGH Network	nginxui	nginx_ui	Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be combined with the directory traversal at `/api/co…	CWE-862 Missing Authorization	CVE-2024-49367	2024-11-7 23:57	2024-10-22	Show	GitHub Exploit DB Packet Storm

248915	-		-	-	UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies.	-	CVE-2024-50637	2024-11-7 23:15	2024-11-7	Show	GitHub Exploit DB Packet Storm

248916	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event With clang's kernel control flow integrity (kCFI, CONFIG_C…	NVD-CWE-noinfo	CVE-2022-48994	2024-11-7 22:52	2024-10-22	Show	GitHub Exploit DB Packet Storm

248917	7.8	HIGH Local	2n	access_commander	In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions.	NVD-CWE-noinfo	CVE-2024-47255	2024-11-7 21:15	2024-11-5	Show	GitHub Exploit DB Packet Storm

248918	7.2	HIGH Network	2n	access_commander	In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the s…	NVD-CWE-noinfo	CVE-2024-47254	2024-11-7 21:15	2024-11-5	Show	GitHub Exploit DB Packet Storm

248919	7.2	HIGH Network	2n	access_commander	In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbit…	CWE-22 Path Traversal	CVE-2024-47253	2024-11-7 21:15	2024-11-5	Show	GitHub Exploit DB Packet Storm

248920	8.8	HIGH Network	zohocorp	manageengine_adaudit_plus	Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.	CWE-89 SQL Injection	CVE-2024-36485	2024-11-7 20:15	2024-11-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed