Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228151	4.3	警告	サイバートラスト株式会社 VMware OpenSSL Project レッドハットオラクル	-	OpenSSL における暗号を強制的に利用される脆弱性	CWE-310 暗号の問題	CVE-2008-7270	2012-12-18 17:31	2010-12-6	Show	GitHub Exploit DB Packet Storm

228152	5	警告	GNU Project VMware	-	GNU C Library の posix/fnmatch.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1659	2012-12-18 17:16	2011-04-8	Show	GitHub Exploit DB Packet Storm

228153	3.7	注意	GNU Project VMware	-	GNU C Library の ld.so における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1658	2012-12-18 17:14	2011-04-8	Show	GitHub Exploit DB Packet Storm

228154	6.2	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の locale/programs/locale.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1095	2012-12-18 17:12	2011-04-4	Show	GitHub Exploit DB Packet Storm

228155	5.1	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library および Embedded GLIBC における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1071	2012-12-18 17:10	2011-04-4	Show	GitHub Exploit DB Packet Storm

228156	6.9	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の elf/dl-object.c における権限を取得される脆弱性	CWE-Other その他	CVE-2011-0536	2012-12-18 17:07	2011-04-4	Show	GitHub Exploit DB Packet Storm

228157	7.2	危険	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の encode_name マクロにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0296	2012-12-18 17:04	2010-06-1	Show	GitHub Exploit DB Packet Storm

228158	5	警告	サイバートラスト株式会社 VMware MIT Kerberos レッドハットオラクル	-	MIT Kerberos 5 の Key Distribution Center におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0282	2012-12-18 16:57	2011-02-8	Show	GitHub Exploit DB Packet Storm

228159	5	警告	サイバートラスト株式会社 VMware MIT Kerberos レッドハットオラクル	-	MIT Kerberos 5 の unparse 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2011-0281	2012-12-18 16:54	2011-02-8	Show	GitHub Exploit DB Packet Storm

228160	3.7	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4450	2012-12-18 16:39	2011-02-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248971	-		-	-	The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via deeplink traversal (in the application's exposed WebView). (O…	-	CVE-2024-45240	2024-11-6 07:35	2024-08-25	Show	GitHub Exploit DB Packet Storm

248972	-		-	-	In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional executi…	-	CVE-2024-34736	2024-11-6 07:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

248973	-		-	-	Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory rea…	-	CVE-2021-46772	2024-11-6 07:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

248974	-		-	-	An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.	-	CVE-2024-41577	2024-11-6 07:35	2024-08-12	Show	GitHub Exploit DB Packet Storm

248975	-		-	-	A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file.	-	CVE-2024-41200	2024-11-6 07:35	2024-08-6	Show	GitHub Exploit DB Packet Storm

248976	-		-	-	Missing Authorization vulnerability in ??????? ????? Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6.	CWE-862 Missing Authorization	CVE-2024-43219	2024-11-6 07:15	2024-11-2	Show	GitHub Exploit DB Packet Storm

248977	8.8	HIGH Network	wpchill	strong_testimonials	Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1…	CWE-862 Missing Authorization	CVE-2024-47362	2024-11-6 06:44	2024-11-2	Show	GitHub Exploit DB Packet Storm

248978	9.8	CRITICAL Network	lb-link	bl-wr1300h_firmware	LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.	CWE-798 Use of Hard-coded Credentials	CVE-2024-51431	2024-11-6 06:37	2024-11-2	Show	GitHub Exploit DB Packet Storm

248979	7.5	HIGH Network	tp-link	mr200_firmware	TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which …	CWE-476 NULL Pointer Dereference	CVE-2024-22733	2024-11-6 06:35	2024-11-2	Show	GitHub Exploit DB Packet Storm

248980	-		-	-	A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a CRLF injection attack d…	-	CVE-2024-47224	2024-11-6 06:35	2024-10-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed