Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252061 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1232 2011-05-9 12:09 2011-04-12 Show GitHub Exploit DB Packet Storm
252062 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1231 2011-05-9 12:08 2011-04-12 Show GitHub Exploit DB Packet Storm
252063 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1230 2011-05-9 12:07 2011-04-12 Show GitHub Exploit DB Packet Storm
252064 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1229 2011-05-9 12:06 2011-04-12 Show GitHub Exploit DB Packet Storm
252065 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1228 2011-05-9 12:04 2011-04-12 Show GitHub Exploit DB Packet Storm
252066 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1227 2011-05-9 12:03 2011-04-12 Show GitHub Exploit DB Packet Storm
252067 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1226 2011-05-9 12:02 2011-04-12 Show GitHub Exploit DB Packet Storm
252068 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1225 2011-05-9 12:01 2011-04-12 Show GitHub Exploit DB Packet Storm
252069 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0677 2011-05-9 11:59 2011-04-12 Show GitHub Exploit DB Packet Storm
252070 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0676 2011-05-9 11:57 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309541 - - - TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of that user. - CVE-2023-26770 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309542 - - - There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 and 11.2 which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentiall… CWE-79
Cross-site Scripting 		CVE-2024-8149 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309543 - - - There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 10.8.1 - 11.2 that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary we… CWE-601
Open Redirect 		CVE-2024-8148 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309544 - - - A Reflected cross-site scripting (XSS) vulnerability in "ccHandler.aspx" CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "bomid" parameter. - CVE-2024-41516 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309545 - - - A reflected cross-site scripting (XSS) vulnerability in "ccHandlerResource.ashx" in CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "res_url" parameter. - CVE-2024-41515 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309546 - - - A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter. - CVE-2024-41514 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309547 - - - A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "searchindex" parameter. - CVE-2024-41513 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309548 - - - A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands via the "bomid" parameter. - CVE-2024-41512 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309549 - - - A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter. - CVE-2024-41511 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
309550 - - - TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution (RCE) vulnerability via the httpProcDataSrv function. - CVE-2024-46486 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm