Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252161	4.3	警告	IBM サイバートラスト株式会社ヒューレット・パッカードターボリナックス OpenSSL Project VMware レッドハット	-	OpenSSL の kssl_keytab_is_available 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0433	2011-03-4 10:48	2010-03-24	Show	GitHub Exploit DB Packet Storm

252162	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0085	2011-03-4 10:45	2010-03-30	Show	GitHub Exploit DB Packet Storm

252163	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0084	2011-03-4 10:44	2010-03-30	Show	GitHub Exploit DB Packet Storm

252164	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の HotSpot Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0082	2011-03-4 10:43	2010-03-30	Show	GitHub Exploit DB Packet Storm

252165	9	危険	マイクロソフト VMware	-	Microsoft SQL Server の insert ステートメントに関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0106	2011-03-4 10:39	2008-07-8	Show	GitHub Exploit DB Packet Storm

252166	9	危険	マイクロソフト VMware	-	Microsoft SQL Server のバックアップファイルのレコードサイズに関するバッファオーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-0107	2011-03-4 10:37	2008-07-8	Show	GitHub Exploit DB Packet Storm

252167	9	危険	マイクロソフト VMware	-	Microsoft SQL Server の SQL データ型の処理に関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0086	2011-03-4 10:35	2008-07-8	Show	GitHub Exploit DB Packet Storm

252168	5	警告	マイクロソフト VMware	-	Microsoft SQL Server のメモリ再配置の際メモリページを初期化しない脆弱性	CWE-200 情報漏えい	CVE-2008-0085	2011-03-4 10:34	2008-07-8	Show	GitHub Exploit DB Packet Storm

252169	9	危険	マイクロソフト VMware	-	Microsoft SQL Server の sp_replwritetovarbin 拡張ストアドプロシージャの処理における脆弱性	CWE-119 バッファエラー	CVE-2008-5416	2011-03-4 10:33	2008-12-25	Show	GitHub Exploit DB Packet Storm

252170	9.3	危険	Sielco Sistemi	-	Sielco Sistemi Winlog にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0517	2011-03-3 16:57	2011-02-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
303801	6.1	MEDIUM Network	janeczku	calibre-web	A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The vulnerability occurs when editing book properties, such as uploading a cover o…	CWE-79 Cross-site Scripting	CVE-2021-3988	2024-11-20 00:43	2024-11-15	Show	GitHub Exploit DB Packet Storm

303802	4.3	MEDIUM Network	viwis	learning_management_system	A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is…	CWE-862 CWE-863 Missing Authorization Incorrect Authorization	CVE-2024-8001	2024-11-20 00:41	2024-11-13	Show	GitHub Exploit DB Packet Storm

303803	7.4	HIGH Network	linuxfoundation	harbor	Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution …	CWE-863 Incorrect Authorization	CVE-2022-31671	2024-11-20 00:40	2024-11-14	Show	GitHub Exploit DB Packet Storm

303804	7.2	HIGH Network	mayurik	best_employee_management_system	A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulati…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-11214	2024-11-20 00:38	2024-11-15	Show	GitHub Exploit DB Packet Storm

303805	9.8	CRITICAL Network	icdsoft	multimanager_wp	The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersona…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2024-11028	2024-11-20 00:38	2024-11-13	Show	GitHub Exploit DB Packet Storm

303806	-		-	-	In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which e…	-	CVE-2024-10103	2024-11-20 00:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

303807	-		-	-	Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component.	-	CVE-2024-33231	2024-11-20 00:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

303808	-		-	-	StepSecurity's Harden-Runner provides network egress filtering and runtime security for GitHub-hosted and self-hosted runners. Versions of step-security/harden-runner prior to v2.10.2 contain multipl…	CWE-78 OS Command	CVE-2024-52587	2024-11-20 00:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

303809	-		-	-	AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account.	-	CVE-2024-51051	2024-11-20 00:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

303810	-		-	-	An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execute arbitrary code via uploading a crafted file.	-	CVE-2024-51053	2024-11-20 00:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed