Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251221 5 警告 アップル
サイバートラスト株式会社
PNG Development Group
オラクル
VMware
レッドハット		 - libpng に含まれる pngrutil.c におけるメモリリークの脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2249 2012-03-27 10:32 2010-06-26 Show GitHub Exploit DB Packet Storm
251222 7.5 危険 アップル
サイバートラスト株式会社
Mozilla Foundation
PNG Development Group
オラクル
VMware
フェンリル株式会社
レッドハット		 - libpng に脆弱性 CWE-119
バッファエラー 		CVE-2010-1205 2012-03-27 10:29 2010-07-6 Show GitHub Exploit DB Packet Storm
251223 7.8 危険 アップル
サイバートラスト株式会社
PNG Development Group
Lunascape
オラクル
VMware
フェンリル株式会社
レッドハット		 - libpng における圧縮された補助チャンクの処理に脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0205 2012-03-27 10:22 2010-03-4 Show GitHub Exploit DB Packet Storm
251224 7.5 危険 クアンタム
デル
IBM		 - 複数のテープライブラリ製品におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-1844 2012-03-26 18:12 2012-03-22 Show GitHub Exploit DB Packet Storm
251225 5 警告 クアンタム
デル		 - Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1841 2012-03-26 18:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251226 5 警告 LG-Nortel - LG-Nortel ELO GS24M に複数の脆弱性 CWE-287
不適切な認証 		CVE-2012-1838 2012-03-26 16:29 2012-03-22 Show GitHub Exploit DB Packet Storm
251227 7.5 危険 Webglimpse - WebGlimpse に OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2012-1795 2012-03-26 16:24 2012-03-20 Show GitHub Exploit DB Packet Storm
251228 7.5 危険 Pydio - AjaXplorer におけるログインのアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2012-1840 2012-03-26 16:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251229 7.5 危険 Pydio - AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1839 2012-03-26 16:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251230 5 警告 IBM - IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1837 2012-03-26 16:07 2012-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309831 5.4 MEDIUM
Network 		- - IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript … CWE-79
Cross-site Scripting 		CVE-2024-35146 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
309832 - - - CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user fro… - CVE-2024-10082 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
309833 - - - CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the API URL ends with Authentication. This by… - CVE-2024-10081 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
309834 - - - The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting which could be used aga… - CVE-2024-9934 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
309835 - - - The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when… - CVE-2024-7879 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
309836 - - - DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability. - CVE-2024-51115 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
309837 - - - An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component - CVE-2024-48746 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
309838 - - - Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows att… - CVE-2024-48176 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
309839 - - - An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location … - CVE-2024-47464 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
309840 - - - An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to c… - CVE-2024-47463 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm