Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251041	7.8	危険	アップルサイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社レッドハット	-	libpng における圧縮された補助チャンクの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-0205	2012-03-27 10:22	2010-03-4	Show	GitHub Exploit DB Packet Storm

251042	7.5	危険	クアンタムデル IBM	-	複数のテープライブラリ製品におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-1844	2012-03-26 18:12	2012-03-22	Show	GitHub Exploit DB Packet Storm

251043	5	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1841	2012-03-26 18:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251044	5	警告	LG-Nortel	-	LG-Nortel ELO GS24M に複数の脆弱性	CWE-287 不適切な認証	CVE-2012-1838	2012-03-26 16:29	2012-03-22	Show	GitHub Exploit DB Packet Storm

251045	7.5	危険	Webglimpse	-	WebGlimpse に OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1795	2012-03-26 16:24	2012-03-20	Show	GitHub Exploit DB Packet Storm

251046	7.5	危険	Pydio	-	AjaXplorer におけるログインのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-1840	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251047	7.5	危険	Pydio	-	AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1839	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251048	5	警告	IBM	-	IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1837	2012-03-26 16:07	2012-03-22	Show	GitHub Exploit DB Packet Storm

251049	4.3	警告	IBM	-	IBM Tivoli Endpoint Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0719	2012-03-26 16:04	2012-03-22	Show	GitHub Exploit DB Packet Storm

251050	4.3	警告	ESET K7 Computing AVG Technologies トレンドマイクロ Ikarus Norman ソフォスマカフィー Beijing Rising International Software BitDefender VirusBlokAda フォーティネットカスペルスキー Emsisoft Authentium シマンテックエフ・セキュア Jiangmin	-	複数の製品の Gzip ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1461	2012-03-26 14:35	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313441	5.4	MEDIUM Network	workdo	crmgo_saas	A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manip…	CWE-79 Cross-site Scripting	CVE-2024-9031	2024-09-26 01:52	2024-09-20	Show	GitHub Exploit DB Packet Storm

313442	3.3	LOW Local	apple	macos	A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15. A malicious app may be able to access notifications from the user's device.	NVD-CWE-noinfo	CVE-2024-40838	2024-09-26 01:46	2024-09-17	Show	GitHub Exploit DB Packet Storm

313443	6.5	MEDIUM Network	zitadel	zitadel	Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other o…	CWE-863 Incorrect Authorization	CVE-2024-47060	2024-09-26 01:43	2024-09-20	Show	GitHub Exploit DB Packet Storm

313444	-		-	-	Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" block. A rogue administrator could add a malicious payload by executing it in the browse…	-	CVE-2024-8661	2024-09-26 01:15	2024-09-17	Show	GitHub Exploit DB Packet Storm

313445	-		-	-	In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocati…	-	CVE-2024-7625	2024-09-26 01:15	2024-08-15	Show	GitHub Exploit DB Packet Storm

313446	4.8	MEDIUM Network	ninjaforms	ninja_forms	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saturday Drive Ninja Forms allows Stored XSS.This issue affects Ninja Forms: from n/a thro…	CWE-79 Cross-site Scripting	CVE-2024-43999	2024-09-26 00:15	2024-09-18	Show	GitHub Exploit DB Packet Storm

313447	6.5	MEDIUM Adjacent	apple	iphone_os ipados	This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A malicious Bluetooth input device may bypass pairing.	NVD-CWE-noinfo	CVE-2024-44124	2024-09-26 00:14	2024-09-17	Show	GitHub Exploit DB Packet Storm

313448	5.4	MEDIUM Network	webhammer	wp_custom_fields_search	The WP Custom Fields Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcfs-preset shortcode in all versions up to, and including, 1.2.35 due to insufficient …	CWE-79 Cross-site Scripting	CVE-2024-8364	2024-09-26 00:08	2024-09-19	Show	GitHub Exploit DB Packet Storm

313449	9.8	CRITICAL Network	freeimage_project	freeimage	libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.	CWE-787 Out-of-bounds Write	CVE-2024-31570	2024-09-25 23:57	2024-09-20	Show	GitHub Exploit DB Packet Storm

313450	9.8	CRITICAL Network	spx	spx_graphics_controller	An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function.	CWE-94 Code Injection	CVE-2024-44623	2024-09-25 23:53	2024-09-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed