Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251501	6.8	警告	blaenkdenum	-	WordPress の Recaptcha プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0759	2012-03-27 18:43	2011-03-22	Show	GitHub Exploit DB Packet Storm

251502	10	危険	CA Technologies	-	CA ETrust Secure Content Manager および CA Gateway Securit の eCS コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2011-0758	2012-03-27 18:43	2011-02-8	Show	GitHub Exploit DB Packet Storm

251503	5	警告	Trustwave	-	Trustwave WebDefend Enterprise のアプリケーションサーバにおけるセキュリティイベントデータを読まれる脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-0756	2012-03-27 18:43	2011-05-4	Show	GitHub Exploit DB Packet Storm

251504	7.5	危険	nazgul	-	nhttpd におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0751	2012-03-27 18:43	2011-03-16	Show	GitHub Exploit DB Packet Storm

251505	6.8	警告	Tincan	-	phpList におけるクロスサイトリクエストフォージェリ脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0748	2012-03-27 18:43	2011-04-13	Show	GitHub Exploit DB Packet Storm

251506	4.3	警告	ZyXEL	-	ZyXEL O2 DSL Router Classic の Forms/PortForwarding_Edit_1 におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0746	2012-03-27 18:43	2011-04-13	Show	GitHub Exploit DB Packet Storm

251507	4	警告	SugarCRM	-	SugarCRM における顧客名などを発見される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0745	2012-03-27 18:43	2011-03-16	Show	GitHub Exploit DB Packet Storm

251508	10	危険	Novell	-	Novell ZENworks Handheld Management の ZfHIPCND.exe におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0742	2012-03-27 18:43	2011-01-25	Show	GitHub Exploit DB Packet Storm

251509	4.3	警告	MODX	-	ModX Evolution におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0741	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

251510	4.3	警告	WordPress.org pleer	-	WordPress 用の RSS Feed Reader の magpie/scripts/magpie_slashbox.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0740	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311631	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put() with fence_fini() Currently we can call fence_fini() twice if something goes wrong when sending …	NVD-CWE-noinfo	CVE-2024-50144	2024-11-19 06:16	2024-11-7	Show	GitHub Exploit DB Packet Storm

311632	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_2016	Active Directory Certificate Services Elevation of Privilege Vulnerability	NVD-CWE-noinfo	CVE-2024-49019	2024-11-19 06:12	2024-11-13	Show	GitHub Exploit DB Packet Storm

311633	8.8	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_server_2025 windows_10_1809 windows_server_2019 windows_10_21h2 windows_11_22h2 windows_10_22h2 windows_11_23h2 windows_serv…	Windows Telephony Service Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-43627	2024-11-19 05:58	2024-11-13	Show	GitHub Exploit DB Packet Storm

311634	8.8	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_server_2025 windows_10_1809 windows_server_2019 windows_server_2022 windows_10_21h2 windows_11_22h2 windows_10_22h2 windows_…	Windows Telephony Service Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-43628	2024-11-19 05:46	2024-11-13	Show	GitHub Exploit DB Packet Storm

311635	-		-	-	A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SAC) UI v14.11 allows authenticated attackers to execute arbitrary web scripts or …	-	CVE-2024-42834	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

311636	-		-	-	SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php	-	CVE-2024-40443	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

311637	-		-	-	Cross Site Scripting vulnerability in Cyber Cafe Management System v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the adminname parameter.	-	CVE-2023-38920	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

311638	7.2	HIGH Network	angeljudesuarez	construction_management_system	A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter.	CWE-89 SQL Injection	CVE-2024-50972	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

311639	7.2	HIGH Network	angeljudesuarez	construction_management_system	A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter.	CWE-89 SQL Injection	CVE-2024-50971	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

311640	8.8	HIGH Network	nikoarroyocuraza	online_furniture_shopping_project	A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2024-50970	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed