Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252391	6.8	警告	アップル	-	Apple Mac OS X の Image RAW におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1846	2010-11-30 14:23	2010-11-16	Show	GitHub Exploit DB Packet Storm

252392	6.8	警告	アップル	-	Apple Mac OS X の ImageIO におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1845	2010-11-30 14:21	2010-11-16	Show	GitHub Exploit DB Packet Storm

252393	7.1	危険	アップル	-	Apple Mac OS X の Image Capture におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1844	2010-11-30 14:19	2010-11-16	Show	GitHub Exploit DB Packet Storm

252394	9.3	危険	アップルアドビシステムズターボリナックス	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2189	2010-11-30 14:08	2010-06-10	Show	GitHub Exploit DB Packet Storm

252395	9.3	危険	アップルアドビシステムズターボリナックスヒューレット・パッカードレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2188	2010-11-30 14:07	2010-06-10	Show	GitHub Exploit DB Packet Storm

252396	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2187	2010-11-30 14:06	2010-06-10	Show	GitHub Exploit DB Packet Storm

252397	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 CWE-noinfo	CVE-2010-2186	2010-11-30 14:05	2010-06-10	Show	GitHub Exploit DB Packet Storm

252398	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2185	2010-11-30 14:04	2010-06-10	Show	GitHub Exploit DB Packet Storm

252399	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2184	2010-11-30 14:03	2010-06-10	Show	GitHub Exploit DB Packet Storm

252400	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2183	2010-11-30 14:01	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306061	8.8	HIGH Network	yugeshverma	student_project_allocation_system	A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/project_selection/project_se…	CWE-89 SQL Injection	CVE-2024-10423	2024-10-29 09:08	2024-10-28	Show	GitHub Exploit DB Packet Storm

306062	5.3	MEDIUM Network	drupal	drupal	core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.	CWE-209 Information Exposure Through an Error Message	CVE-2024-45440	2024-10-29 06:35	2024-08-29	Show	GitHub Exploit DB Packet Storm

306063	6.8	MEDIUM Adjacent	safie	qbic_cloud_cc-2\/2l_firmware safie_one_firmware	QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communi…	CWE-295 Improper Certificate Validation	CVE-2024-39771	2024-10-29 06:35	2024-08-28	Show	GitHub Exploit DB Packet Storm

306064	5.4	MEDIUM Network	hp	poly_clariti_manager_firmware	A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not properly neutralize input during a web page generation.	CWE-79 Cross-site Scripting	CVE-2024-41911	2024-10-29 06:35	2024-08-6	Show	GitHub Exploit DB Packet Storm

306065	3.3	LOW Local	rd_labs_llc	who	The com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places sensitive information in the system log.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2024-40096	2024-10-29 06:35	2024-08-5	Show	GitHub Exploit DB Packet Storm

306066	5.3	MEDIUM Network	mecodia	feripro	An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a list of all users and their corresponding …	NVD-CWE-Other	CVE-2024-41517	2024-10-29 06:35	2024-08-3	Show	GitHub Exploit DB Packet Storm

306067	-		-	-	Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-37295. Reason: This candidate is a reservation duplicate of CVE-2024-37295. Notes: All CVE users should reference CVE-2024-3729…	-	CVE-2024-36811	2024-10-29 06:15	2024-06-8	Show	GitHub Exploit DB Packet Storm

306068	-		-	-	Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861.	-	CVE-2024-47031	2024-10-29 05:35	2024-10-25	Show	GitHub Exploit DB Packet Storm

306069	-		-	-	Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.	-	CVE-2024-47030	2024-10-29 05:35	2024-10-25	Show	GitHub Exploit DB Packet Storm

306070	-		-	-	An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrar…	-	CVE-2024-45262	2024-10-29 05:35	2024-10-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed