Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251311	7.5	危険	Laurent Destailleur	-	AWStats における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4367	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

251312	4.3	警告	abk-soft	-	Chameleon Social Networking の forum_new_topic.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4366	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251313	7.5	危険	Joomla! Jextensions	-	Joomla! のJE Ajax Event Calendar コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4365	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251314	4.3	警告	dadabik	-	DaDaBIK における保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4364	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251315	6.8	警告	mrcgiguy	-	MCG FreeTicket の contact.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4363	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251316	7.5	危険	Micronetsoft	-	MicroNetsoft RV Dealer Website における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4362	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251317	4.3	警告	jurpo	-	Jurpopage の url-gateway.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4361	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251318	7.5	危険	jurpo	-	Jurpopage の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4360	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251319	7.5	危険	jurpo	-	Jurpopage の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4359	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251320	4.3	警告	mrcgiguy	-	MCG Guestbook の gb.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4358	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310511	-		-	-	Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.	-	CVE-2024-44546	2024-11-20 05:35	2024-11-12	Show	GitHub Exploit DB Packet Storm

310512	-		-	-	In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = route(3333333333333333333,2,1,2,3,1) : *;" leads to stack consumption.	-	CVE-2021-41737	2024-11-20 05:35	2024-11-11	Show	GitHub Exploit DB Packet Storm

310513	-		-	-	An issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in the OAuth2.0 handler, i.e., it does not verify access token validity. An attacker can use a expired acce…	-	CVE-2021-35473	2024-11-20 05:35	2024-11-11	Show	GitHub Exploit DB Packet Storm

310514	8.8	HIGH Network	microsoft	sql_server_2016 sql_server_2017 sql_server_2019	SQL Server Native Client Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-43462	2024-11-20 05:18	2024-11-13	Show	GitHub Exploit DB Packet Storm

310515	-		-	-	Rejected reason: This CVE was previously published at https://bugzilla.redhat.com/show_bug.cgi?id=2262978 but later rejected for the following reason: The flaw requires an attacker to have superuser …	-	CVE-2024-1271	2024-11-20 05:15	2024-11-20	Show	GitHub Exploit DB Packet Storm

310516	9.8	CRITICAL Network	microsoft	.net visual_studio_2022	.NET and Visual Studio Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-43498	2024-11-20 05:01	2024-11-13	Show	GitHub Exploit DB Packet Storm

310517	7.5	HIGH Network	microsoft	.net visual_studio_2022	.NET and Visual Studio Denial of Service Vulnerability	NVD-CWE-noinfo	CVE-2024-43499	2024-11-20 04:59	2024-11-13	Show	GitHub Exploit DB Packet Storm

310518	6.7	MEDIUM Local	intel	server_board_m70klp2sb_firmware	Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-284 Improper Access Control	CVE-2024-39609	2024-11-20 04:58	2024-11-14	Show	GitHub Exploit DB Packet Storm

310519	6.7	MEDIUM Local	intel	m10jnp2sb_firmware	Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access.	NVD-CWE-noinfo	CVE-2024-41167	2024-11-20 04:45	2024-11-14	Show	GitHub Exploit DB Packet Storm

310520	8.1	HIGH Network	apereo	central_authentication_service	A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiratio…	CWE-613 Insufficient Session Expiration	CVE-2024-11208	2024-11-20 04:38	2024-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed