Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251991	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2011-0577	2011-03-30 13:33	2011-02-8	Show	GitHub Exploit DB Packet Storm

251992	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0574	2011-03-30 13:32	2011-02-8	Show	GitHub Exploit DB Packet Storm

251993	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0573	2011-03-30 13:31	2011-02-8	Show	GitHub Exploit DB Packet Storm

251994	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0572	2011-03-30 12:16	2011-02-8	Show	GitHub Exploit DB Packet Storm

251995	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0571	2011-03-30 12:15	2011-02-8	Show	GitHub Exploit DB Packet Storm

251996	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0561	2011-03-30 12:12	2011-02-8	Show	GitHub Exploit DB Packet Storm

251997	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0560	2011-03-30 12:11	2011-02-8	Show	GitHub Exploit DB Packet Storm

251998	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0559	2011-03-30 12:10	2011-02-8	Show	GitHub Exploit DB Packet Storm

251999	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0558	2011-03-30 12:08	2011-02-8	Show	GitHub Exploit DB Packet Storm

252000	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0120	2011-03-29 15:56	2011-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305671	7.5	HIGH Network	63moons	aero wave_2.0	This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by interceptin…	NVD-CWE-Other	CVE-2024-51561	2024-11-7 00:59	2024-11-4	Show	GitHub Exploit DB Packet Storm

305672	6.1	MEDIUM Network	bna	pospratik	Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings.This issue affects PosPratik: before v3.…	CWE-79 Cross-site Scripting	CVE-2024-9147	2024-11-7 00:53	2024-11-4	Show	GitHub Exploit DB Packet Storm

305673	7.5	HIGH Network	zimaspace	zimaos	ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint `http://<Zima_Server_IP:PORT>/v3/file?t…	CWE-22 Path Traversal	CVE-2024-48931	2024-11-7 00:46	2024-10-25	Show	GitHub Exploit DB Packet Storm

305674	9.8	CRITICAL Network	lunary	lunary	A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prior sanitization, all…	CWE-89 SQL Injection	CVE-2024-7456	2024-11-7 00:45	2024-11-1	Show	GitHub Exploit DB Packet Storm

305675	4.8	MEDIUM Network	dublue	table_of_contents_plus	The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting atta…	CWE-79 Cross-site Scripting	CVE-2024-5578	2024-11-7 00:44	2024-11-5	Show	GitHub Exploit DB Packet Storm

305676	4.8	MEDIUM Network	nsqua	simply_schedule_appointments	The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Notification settings, which could allow high …	CWE-79 Cross-site Scripting	CVE-2024-7877	2024-11-7 00:42	2024-11-5	Show	GitHub Exploit DB Packet Storm

305677	4.8	MEDIUM Network	nsqua	simply_schedule_appointments	The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Appointment Type settings, which could allow h…	CWE-79 Cross-site Scripting	CVE-2024-7876	2024-11-7 00:42	2024-11-5	Show	GitHub Exploit DB Packet Storm

305678	-		-	-	An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room…	-	CVE-2024-42773	2024-11-7 00:35	2024-08-23	Show	GitHub Exploit DB Packet Storm

305679	8.8	HIGH Network	zohocorp	manageengine_exchange_reporter_plus	Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.	CWE-89 SQL Injection	CVE-2024-9459	2024-11-7 00:29	2024-11-5	Show	GitHub Exploit DB Packet Storm

305680	7.5	HIGH Network	zimaspace	zimaos	ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as `http://<Server-IP>/v1/use…	CWE-862 Missing Authorization	CVE-2024-49357	2024-11-7 00:28	2024-10-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed