Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251591 6.4 警告 VMware - VMware ACE の ACE 共有フォルダ実装における無効にされた共有フォルダを有効にされる脆弱性 CWE-noinfo
情報不足 		CVE-2009-0908 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
251592 2.1 注意 VMware - 複数の VMware 製品の VI Client におけるパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0518 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
251593 4.4 警告 KVM
レッドハット		 - KVM の x86 エミュレータにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0419 2010-03-23 14:09 2010-03-1 Show GitHub Exploit DB Packet Storm
251594 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0263 2010-03-19 10:28 2010-03-9 Show GitHub Exploit DB Packet Storm
251595 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0262 2010-03-19 10:28 2010-03-9 Show GitHub Exploit DB Packet Storm
251596 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0261 2010-03-19 10:28 2010-03-9 Show GitHub Exploit DB Packet Storm
251597 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0260 2010-03-19 10:28 2010-03-9 Show GitHub Exploit DB Packet Storm
251598 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0258 2010-03-19 10:27 2010-03-9 Show GitHub Exploit DB Packet Storm
251599 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0264 2010-03-19 10:27 2010-03-9 Show GitHub Exploit DB Packet Storm
251600 9.3 危険 マイクロソフト - Microsoft Office Excel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0257 2010-03-19 10:27 2010-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250921 5.4 MEDIUM
Network 		exceedone exment Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), … CWE-79
Cross-site Scripting 		CVE-2024-47793 2024-10-22 06:25 2024-10-18 Show GitHub Exploit DB Packet Storm
250922 9.8 CRITICAL
Network 		microsoft visual_studio_code Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector. NVD-CWE-noinfo
CVE-2024-43488 2024-10-22 06:05 2024-10-9 Show GitHub Exploit DB Packet Storm
250923 6.1 MEDIUM
Network 		comfy comfyui A stored cross-site scripting (XSS) vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier. The vulnerability occurs when an attacker uploads an HTML file containing a mali… CWE-79
Cross-site Scripting 		CVE-2024-10099 2024-10-22 06:03 2024-10-18 Show GitHub Exploit DB Packet Storm
250924 7.1 HIGH
Network 		microsoft windows_server_2022_23h2
windows_server_2022
windows_server_2019
windows_10_1809
windows_11_21h2
windows_10_21h2
windows_11_22h2
windows_10_22h2
windows_11_23h2
windows_11_… 		Microsoft OpenSSH for Windows Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-43615 2024-10-22 06:00 2024-10-9 Show GitHub Exploit DB Packet Storm
250925 5.4 MEDIUM
Network 		fahadmahmood rss_feed_widget The RSS Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rfw-youtube-videos shortcode in all versions up to, and including, 2.9.9 due to insufficient inp… CWE-79
Cross-site Scripting 		CVE-2024-10057 2024-10-22 05:53 2024-10-18 Show GitHub Exploit DB Packet Storm
250926 5.5 MEDIUM
Local 		microsoft defender_for_endpoint Microsoft Defender for Endpoint for Linux Spoofing Vulnerability NVD-CWE-noinfo
CVE-2024-43614 2024-10-22 05:50 2024-10-9 Show GitHub Exploit DB Packet Storm
250927 4.7 MEDIUM
Network 		microsoft power_bi_report_server Power BI Report Server Spoofing Vulnerability NVD-CWE-noinfo
CVE-2024-43612 2024-10-22 05:48 2024-10-9 Show GitHub Exploit DB Packet Storm
250928 7.8 HIGH
Local 		microsoft office
365_apps
office_long_term_servicing_channel 		Microsoft Office Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-43616 2024-10-22 05:47 2024-10-9 Show GitHub Exploit DB Packet Storm
250929 9.8 CRITICAL
Network 		rittal iot_interface_firmware
cmc_iii_processing_units_firmware 		The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which… CWE-331
 Insufficient Entropy 		CVE-2024-47945 2024-10-22 04:41 2024-10-15 Show GitHub Exploit DB Packet Storm
250930 7.8 HIGH
Local 		autodesk revit A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, o… CWE-787
 Out-of-bounds Write 		CVE-2024-7994 2024-10-22 03:35 2024-10-17 Show GitHub Exploit DB Packet Storm