Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250881 6.4 警告 シスコシステムズ - 複数の Cisco UVC System 製品の Web インターフェースにおけるセッションがハイジャックされる脆弱性 CWE-310
暗号の問題 		CVE-2010-4304 2012-03-27 18:42 2010-11-17 Show GitHub Exploit DB Packet Storm
250882 4.9 警告 シスコシステムズ - Cisco UVC System 5110 および 5115 における暗号化されたパスワードファイルを発見される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-4303 2012-03-27 18:42 2010-11-17 Show GitHub Exploit DB Packet Storm
250883 4.9 警告 シスコシステムズ - Cisco UVC System 5110 および 5115 の /opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-4302 2012-03-27 18:42 2010-11-17 Show GitHub Exploit DB Packet Storm
250884 9.3 危険 Novell - Novell ZHM の ZfHIPCND.exe におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4299 2012-03-27 18:42 2010-11-2 Show GitHub Exploit DB Packet Storm
250885 7.5 危険 dustincowell - Free Simple Software の download モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4298 2012-03-27 18:42 2010-11-26 Show GitHub Exploit DB Packet Storm
250886 7.5 危険 Artica ST - Pandora FMS における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4283 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250887 7.5 危険 Artica ST - Pandora FMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4282 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250888 7.5 危険 Artica ST - Pandora FMS の safe_url_extraclean 関数における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4281 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250889 7.5 危険 Artica ST - Pandora FMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4280 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250890 10 危険 Artica ST - Pandora FMS のディフォルト設定における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-4279 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312541 - - - SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to job… - CVE-2024-48936 2024-10-31 06:35 2024-10-28 Show GitHub Exploit DB Packet Storm
312542 - - - ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.e… - CVE-2024-50624 2024-10-31 06:35 2024-10-28 Show GitHub Exploit DB Packet Storm
312543 8.8 HIGH
Network 		google chrome Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security seve… NVD-CWE-noinfo
CVE-2024-7974 2024-10-31 06:35 2024-08-22 Show GitHub Exploit DB Packet Storm
312544 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr 		Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header pr… NVD-CWE-noinfo
CVE-2024-7531 2024-10-31 06:35 2024-08-6 Show GitHub Exploit DB Packet Storm
312545 8.8 HIGH
Network 		zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before Patch 46. It allows authenticated users to exploit Server-Si… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-45518 2024-10-31 06:23 2024-10-23 Show GitHub Exploit DB Packet Storm
312546 7.8 HIGH
Local 		ysoft safeq A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authent… CWE-306
Missing Authentication for Critical Function 		CVE-2022-23862 2024-10-31 06:21 2024-10-23 Show GitHub Exploit DB Packet Storm
312547 9.8 CRITICAL
Network 		riskengine radar A vulnerability was found in wfh45678 Radar up to 1.0.8 and classified as critical. This issue affects some unknown processing of the component Interface Handler. The manipulation with the input /../… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10121 2024-10-31 06:21 2024-10-19 Show GitHub Exploit DB Packet Storm
312548 7.8 HIGH
Local 		helakuru helakuru An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-48605 2024-10-31 06:19 2024-10-23 Show GitHub Exploit DB Packet Storm
312549 4.9 MEDIUM
Network 		i13websolution photo_gallery_slideshow_\&_masonry_tiled_gallery The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping… CWE-89
SQL Injection 		CVE-2019-25218 2024-10-31 06:18 2024-10-19 Show GitHub Exploit DB Packet Storm
312550 4.3 MEDIUM
Network 		nofusscomputing centurion_erp No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of.… NVD-CWE-noinfo
CVE-2024-49373 2024-10-31 06:16 2024-10-23 Show GitHub Exploit DB Packet Storm