Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252411	9.3	危険	アップル	-	Apple Mac OS X の Disk Image における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1841	2010-11-29 15:45	2010-11-15	Show	GitHub Exploit DB Packet Storm

252412	7.5	危険	アップル	-	Apple Mac OS X の password-validation 機能におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1840	2010-11-29 15:43	2010-11-15	Show	GitHub Exploit DB Packet Storm

252413	4.4	警告	アップル	-	Apple Mac OS X の Directory Services における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-1838	2010-11-29 15:41	2010-11-15	Show	GitHub Exploit DB Packet Storm

252414	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2174	2010-11-29 15:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

252415	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2173	2010-11-29 15:26	2010-06-10	Show	GitHub Exploit DB Packet Storm

252416	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2172	2010-11-29 15:25	2010-06-10	Show	GitHub Exploit DB Packet Storm

252417	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2171	2010-11-29 15:24	2010-06-10	Show	GitHub Exploit DB Packet Storm

252418	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2170	2010-11-29 15:21	2010-06-10	Show	GitHub Exploit DB Packet Storm

252419	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2169	2010-11-29 15:18	2010-06-10	Show	GitHub Exploit DB Packet Storm

252420	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2167	2010-11-29 15:17	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305401	-		-	-	A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/email_templates.php. The vulnerability is exploitable …	-	CVE-2024-50802	2024-11-5 04:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

305402	-		-	-	A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/collections.php. The vulnerability is exploitable via …	-	CVE-2024-50801	2024-11-5 04:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

305403	-		-	-	Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: this is disputed by the vendor because fi…	-	CVE-2024-48734	2024-11-5 04:35	2024-10-31	Show	GitHub Exploit DB Packet Storm

305404	-		-	-	SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL commands via the POST body request. NOTE: this is disputed…	-	CVE-2024-48733	2024-11-5 04:35	2024-10-31	Show	GitHub Exploit DB Packet Storm

305405	-		-	-	http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter.	-	CVE-2023-52066	2024-11-5 04:35	2024-10-31	Show	GitHub Exploit DB Packet Storm

305406	-		-	-	A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs at the /file endpoint, which renders HTML files. Malicious HTML files cont…	-	CVE-2024-10101	2024-11-5 04:15	2024-10-18	Show	GitHub Exploit DB Packet Storm

305407	-		-	-	A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encod…	CWE-22 Path Traversal	CVE-2024-10100	2024-11-5 04:15	2024-10-18	Show	GitHub Exploit DB Packet Storm

305408	7.8	HIGH Local	intelbras	incontrol_web	A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webca…	CWE-428 CWE-426 Unquoted Search Path or Element Untrusted Search Path	CVE-2024-9325	2024-11-5 04:15	2024-09-29	Show	GitHub Exploit DB Packet Storm

305409	8.8	HIGH Network	intelbras	incontrol_web	A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file /v1/operador/ of the component Relatóri…	CWE-94 CWE-74 CWE-707 Code Injection Injection Improper Enforcement of Message or Data Structure	CVE-2024-9324	2024-11-5 04:15	2024-09-29	Show	GitHub Exploit DB Packet Storm

305410	-		-	-	Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.	-	CVE-2024-51328	2024-11-5 03:50	2024-11-5	Show	GitHub Exploit DB Packet Storm