Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252091 4.3 警告 Mozilla Foundation - Mozilla Firefox などで使用される Mozilla Gecko における任意のイメージの近似コピーを取得される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2366 2011-07-13 10:06 2011-06-21 Show GitHub Exploit DB Packet Storm
252092 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の WebGL 実装における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2368 2011-07-13 10:05 2011-06-21 Show GitHub Exploit DB Packet Storm
252093 6.4 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の WebGL 実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2367 2011-07-13 10:04 2011-06-21 Show GitHub Exploit DB Packet Storm
252094 2.6 注意 ISC, Inc. - ISC BIND 9.8 系にサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-2465 2011-07-11 14:25 2011-07-6 Show GitHub Exploit DB Packet Storm
252095 2.6 注意 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2011-07-8 12:01 2011-07-8 Show GitHub Exploit DB Packet Storm
252096 4.9 警告 アップル - Apple Mac OS X の kernel の IPv6 実装におけるサービス運用妨害 (Null ポインタデリファレンス、およびリブート) の脆弱性 CWE-Other
その他
CVE-2011-1132 2011-07-8 10:12 2011-06-24 Show GitHub Exploit DB Packet Storm
252097 6.4 警告 アップル - Apple Mac OS X の servermgrd における任意のファイルを読まれる脆弱性 CWE-399
リソース管理の問題
CVE-2011-0212 2011-07-8 10:10 2011-06-24 Show GitHub Exploit DB Packet Storm
252098 6.8 警告 アップル - Apple Mac OS X の QuickLook における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0208 2011-07-7 11:34 2011-06-24 Show GitHub Exploit DB Packet Storm
252099 5 警告 アップル - Apple Mac OS X の MobileMe における重要なエイリアス情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-0207 2011-07-7 11:33 2011-06-24 Show GitHub Exploit DB Packet Storm
252100 6.8 警告 アップル - Apple Mac OS X の ImageIO におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0205 2011-07-7 11:30 2011-06-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309871 6.5 MEDIUM
Network
synology drive_client Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive informatio… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2022-49037 2024-10-9 01:08 2024-09-26 Show GitHub Exploit DB Packet Storm
309872 6.7 MEDIUM
Local
cisco telepresence_video_communication_server A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate pri… CWE-77
Command Injection
CVE-2024-20492 2024-10-9 01:07 2024-10-3 Show GitHub Exploit DB Packet Storm
309873 4.4 MEDIUM
Local
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with adminis… CWE-120
Classic Buffer Overflow
CVE-2022-49040 2024-10-9 01:07 2024-09-26 Show GitHub Exploit DB Packet Storm
309874 4.4 MEDIUM
Local
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with admini… CWE-120
Classic Buffer Overflow
CVE-2022-49041 2024-10-9 01:06 2024-09-26 Show GitHub Exploit DB Packet Storm
309875 5.4 MEDIUM
Network
cisco nexus_dashboard
nexus_dashboard_fabric_controller
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device. This vulnerability exis… CWE-862
 Missing Authorization
CVE-2024-20477 2024-10-9 01:00 2024-10-3 Show GitHub Exploit DB Packet Storm
309876 8.2 HIGH
Network
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial … CWE-120
Classic Buffer Overflow
CVE-2023-52946 2024-10-9 00:55 2024-09-26 Show GitHub Exploit DB Packet Storm
309877 8.6 HIGH
Network
cisco nexus_dashboard_orchestrator
nexus_dashboard_insights
nexus_dashboard_fabric_controller
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because … CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-20491 2024-10-9 00:55 2024-10-3 Show GitHub Exploit DB Packet Storm
309878 9.8 CRITICAL
Network
deltaww diaenergie Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the target… CWE-89
SQL Injection
CVE-2024-43699 2024-10-9 00:44 2024-10-4 Show GitHub Exploit DB Packet Storm
309879 8.8 HIGH
Network
deltaww diaenergie Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product. CWE-89
SQL Injection
CVE-2024-42417 2024-10-9 00:43 2024-10-4 Show GitHub Exploit DB Packet Storm
309880 9.8 CRITICAL
Network
draytek vigor3912_firmware
vigor2962_firmware
vigor3910_firmware
vigor165_firmware
vigor1000b_firmware
vigor166_firmware
vigor2135_firmware
vigor2763_firmware
vigor2765_firmware
vi…
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of… CWE-787
 Out-of-bounds Write
CVE-2024-41593 2024-10-9 00:35 2024-10-4 Show GitHub Exploit DB Packet Storm