Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252371	4.3	警告	アップルターボリナックス FreeType Project	-	FreeType の bdf/bdflib.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3053	2010-12-2 16:28	2010-08-19	Show	GitHub Exploit DB Packet Storm

252372	5	警告	アップル	-	Apple Mac OS X の Printing におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3784	2010-12-1 16:14	2010-11-16	Show	GitHub Exploit DB Packet Storm

252373	6.8	警告	アップル	-	Apple Mac OS X のパスワードサーバにおけるパスワードの認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3783	2010-12-1 16:12	2010-11-16	Show	GitHub Exploit DB Packet Storm

252374	6.8	警告	アップルターボリナックス FreeType Project オラクル	-	FreeType における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-2807	2010-12-1 16:00	2010-08-19	Show	GitHub Exploit DB Packet Storm

252375	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の t42_parse_sfnts 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2806	2010-12-1 15:58	2010-08-19	Show	GitHub Exploit DB Packet Storm

252376	6.8	警告	アップルターボリナックス FreeType Project レッドハットオラクル	-	FreeType の FT_Stream_EnterFrame 関数における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2805	2010-12-1 15:55	2010-08-19	Show	GitHub Exploit DB Packet Storm

252377	5.1	警告	アップルターボリナックス FreeType Project オラクル	-	FreeType の Ins_IUP 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2520	2010-12-1 15:28	2010-08-19	Show	GitHub Exploit DB Packet Storm

252378	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の Mac_Read_POST_Resource 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2519	2010-12-1 15:27	2010-07-12	Show	GitHub Exploit DB Packet Storm

252379	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の gray_render_span 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2500	2010-12-1 15:26	2010-07-12	Show	GitHub Exploit DB Packet Storm

252380	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2499	2010-12-1 15:24	2010-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305901	-		-	-	HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors.	-	CVE-2024-30132	2024-10-30 06:35	2024-10-1	Show	GitHub Exploit DB Packet Storm

305902	5.5	MEDIUM Local	wibu	wibukey	An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulti…	CWE-125 Out-of-bounds Read	CVE-2024-45182	2024-10-30 06:35	2024-09-13	Show	GitHub Exploit DB Packet Storm

305903	8.8	HIGH Network	italtel	embrace	An issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of an authenticated user inside GET requests. The query string for the URL could be saved in the browser…	NVD-CWE-noinfo	CVE-2024-31842	2024-10-30 06:35	2024-08-21	Show	GitHub Exploit DB Packet Storm

305904	-		-	-	Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier reportedly does "not consider the bug a security issu…	-	CVE-2024-44069	2024-10-30 06:35	2024-08-19	Show	GitHub Exploit DB Packet Storm

305905	5.4	MEDIUM Network	mecodia	feripro	Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.	CWE-79 Cross-site Scripting	CVE-2024-41519	2024-10-30 06:35	2024-08-3	Show	GitHub Exploit DB Packet Storm

305906	5.3	MEDIUM Network	litestream	litestream	An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-th…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2024-41254	2024-10-30 06:35	2024-08-1	Show	GitHub Exploit DB Packet Storm

305907	4.3	MEDIUM Network	agnai	agnai	Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chos…	CWE-22 Path Traversal	CVE-2024-47170	2024-10-30 05:59	2024-09-27	Show	GitHub Exploit DB Packet Storm

305908	5.4	MEDIUM Network	x2engine	x2crm	X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject malicious JavaScript code into the "Name" field when creating a list.	CWE-79 Cross-site Scripting	CVE-2024-48120	2024-10-30 05:57	2024-10-14	Show	GitHub Exploit DB Packet Storm

305909	7.2	HIGH Network	mayurik	petrol_pump_management	A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_f…	CWE-89 SQL Injection	CVE-2024-10406	2024-10-30 05:48	2024-10-27	Show	GitHub Exploit DB Packet Storm

305910	7.2	HIGH Network	mayurik	petrol_pump_management	A vulnerability, which was classified as critical, was found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /admin/edit_customer.php. The manipulation…	CWE-89 SQL Injection	CVE-2024-10407	2024-10-30 05:47	2024-10-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed