Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251851	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の tc_fill_tclass 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3228	2010-01-26 11:37	2009-10-19	Show	GitHub Exploit DB Packet Storm

251852	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo32 コーデックの ir32_32.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-4313	2010-01-25 11:53	2009-12-8	Show	GitHub Exploit DB Packet Storm

251853	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4312	2010-01-25 11:52	2009-12-8	Show	GitHub Exploit DB Packet Storm

251854	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4311	2010-01-25 11:52	2009-12-8	Show	GitHub Exploit DB Packet Storm

251855	9.3	危険	マイクロソフト	-	Indeo コーデックに複数の脆弱性	CWE-119 バッファエラー	CVE-2009-4310	2010-01-25 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

251856	9.3	危険	マイクロソフト	-	Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4309	2010-01-25 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

251857	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2009-4210	2010-01-25 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

251858	5	警告	アップルサイバートラスト株式会社 IPsec-Tools レッドハット	-	Ipsec-tools の証明書検証および NAT-Traversal におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1632	2010-01-25 11:48	2009-05-14	Show	GitHub Exploit DB Packet Storm

251859	4	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	PostgreSQL のエラーメッセージの変換処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-0922	2010-01-25 11:48	2009-03-17	Show	GitHub Exploit DB Packet Storm

251860	5.7	警告	日本電気インターネットイニシアティブヤマハ古河電気工業	-	IPv6 を実装した複数の製品にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-01-25 11:47	2009-10-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252461	6.1	MEDIUM Network	contempo	pdf_image_generator	The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and includi…	CWE-79 Cross-site Scripting	CVE-2024-9241	2024-10-8 03:51	2024-10-1	Show	GitHub Exploit DB Packet Storm

252462	9.8	CRITICAL Network	coderevolution	echo_rss_feed_post_generator	The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles t…	NVD-CWE-noinfo	CVE-2024-9265	2024-10-8 03:48	2024-10-1	Show	GitHub Exploit DB Packet Storm

252463	7.8	HIGH Local	autodesk	navisworks	A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensit…	CWE-125 Out-of-bounds Read	CVE-2024-7670	2024-10-8 03:43	2024-10-1	Show	GitHub Exploit DB Packet Storm

252464	7.8	HIGH Local	autodesk	navisworks	A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sen…	CWE-787 Out-of-bounds Write	CVE-2024-7672	2024-10-8 03:35	2024-10-1	Show	GitHub Exploit DB Packet Storm

252465	7.8	HIGH Local	autodesk	navisworks	A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerability to cause a crash or execute arbitra…	CWE-416 Use After Free	CVE-2024-7675	2024-10-8 03:34	2024-10-1	Show	GitHub Exploit DB Packet Storm

252466	7.8	HIGH Local	autodesk	navisworks	A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or e…	CWE-787 Out-of-bounds Write	CVE-2024-7674	2024-10-8 03:34	2024-10-1	Show	GitHub Exploit DB Packet Storm

252467	7.8	HIGH Local	autodesk	navisworks	A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or ex…	CWE-787 Out-of-bounds Write	CVE-2024-7673	2024-10-8 03:34	2024-10-1	Show	GitHub Exploit DB Packet Storm

252468	7.8	HIGH Local	autodesk	navisworks	A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write se…	CWE-787 Out-of-bounds Write	CVE-2024-7671	2024-10-8 03:34	2024-10-1	Show	GitHub Exploit DB Packet Storm

252469	9.8	CRITICAL Network	redefiningtheweb	affiliate_pro	The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1. This is due to the rtwwwap_login_request_callbac…	CWE-306 Missing Authentication for Critical Function	CVE-2024-9289	2024-10-8 03:25	2024-10-1	Show	GitHub Exploit DB Packet Storm

252470	7.4	HIGH Adjacent	cisco	ios_xr	A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause …	NVD-CWE-noinfo	CVE-2024-20406	2024-10-8 02:56	2024-09-12	Show	GitHub Exploit DB Packet Storm