Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251491	4.3	警告	マカフィー Doctor Web Beijing Rising International Software フォーティネット Panda Security アラジン	-	複数の製品の ELF パーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1454	2012-03-23 16:24	2012-03-21	Show	GitHub Exploit DB Packet Storm

251492	4.3	警告	トレンドマイクロ Antiy Labs マカフィー Ikarus Doctor Web ソフォス CA Technologies Beijing Rising International Software フォーティネットマイクロソフト Panda Security カスペルスキー Emsisoft	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1453	2012-03-23 16:17	2012-03-21	Show	GitHub Exploit DB Packet Storm

251493	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1436	2012-03-23 14:39	2012-03-21	Show	GitHub Exploit DB Packet Storm

251494	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1435	2012-03-23 14:37	2012-03-21	Show	GitHub Exploit DB Packet Storm

251495	4.3	警告	アンラボ Panda Security Ikarus Emsisoft	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1434	2012-03-23 14:34	2012-03-21	Show	GitHub Exploit DB Packet Storm

251496	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1433	2012-03-23 14:26	2012-03-21	Show	GitHub Exploit DB Packet Storm

251497	4.3	警告	Ikarus Emsisoft クイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1452	2012-03-23 14:14	2012-03-21	Show	GitHub Exploit DB Packet Storm

251498	4.3	警告	Ikarus Emsisoft	-	Emsisoft Anti-Malware および Ikarus Virus Utilities T3 Command Line Scanner の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1451	2012-03-23 14:08	2012-03-21	Show	GitHub Exploit DB Packet Storm

251499	4.3	警告	ソフォス Ikarus Emsisoft	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1450	2012-03-23 14:04	2012-03-21	Show	GitHub Exploit DB Packet Storm

251500	4.3	警告	Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1432	2012-03-23 13:59	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310481	9.8	CRITICAL Network	servicenow	servicenow	ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context…	CWE-94 Code Injection	CVE-2024-8923	2024-11-8 02:18	2024-10-30	Show	GitHub Exploit DB Packet Storm

310482	7.5	HIGH Network	servicenow	servicenow	ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. Serv…	CWE-89 SQL Injection	CVE-2024-8924	2024-11-8 02:16	2024-10-30	Show	GitHub Exploit DB Packet Storm

310483	7.8	HIGH Local	autodesk	autocad_architecture autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d civil_3d advance_steel autocad	A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cau…	CWE-787 Out-of-bounds Write	CVE-2024-8587	2024-11-8 02:15	2024-10-30	Show	GitHub Exploit DB Packet Storm

310484	3.3	LOW Local	hashicorp	vagrant_vmware_utility	The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system wr…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-10228	2024-11-8 02:12	2024-10-30	Show	GitHub Exploit DB Packet Storm

310485	8.8	HIGH Network	anisha	university_event_management_system	A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. This affects an unknown part of the file doedit.php. The manipulation of the arg…	CWE-89 SQL Injection	CVE-2024-10805	2024-11-8 02:09	2024-11-5	Show	GitHub Exploit DB Packet Storm

310486	6.5	MEDIUM Network	tenda	i22_firmware	A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV?fgHPOST/goform/SysToo…	CWE-476 NULL Pointer Dereference	CVE-2024-10750	2024-11-8 02:09	2024-11-4	Show	GitHub Exploit DB Packet Storm

310487	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf/32: Fix Oops on tail call tests test_bpf tail call tests end up as: test_bpf: #0 Tail call leaf jited:1 85 PASS …	CWE-787 Out-of-bounds Write	CVE-2022-48998	2024-11-8 02:08	2024-10-22	Show	GitHub Exploit DB Packet Storm

310488	4.7	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: char: tpm: Protect tpm_pm_suspend with locks Currently tpm transactions are executed unconditionally in tpm_pm_suspend() function…	NVD-CWE-noinfo	CVE-2022-48997	2024-11-8 02:07	2024-10-22	Show	GitHub Exploit DB Packet Storm

310489	8.8	HIGH Network	ithemelandco	woocommerce_report	The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settin…	CWE-352 Origin Validation Error	CVE-2024-10711	2024-11-8 02:04	2024-11-5	Show	GitHub Exploit DB Packet Storm

310490	8.1	HIGH Network	wpwebelite	woocommerce_-_social_login	The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.7.7. This is due to insufficient verification on the user being retu…	NVD-CWE-noinfo	CVE-2024-10114	2024-11-8 02:04	2024-11-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed