Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252441 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品の nsTextFrameUtils::TransformText 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3166 2011-05-17 08:50 2010-09-7 Show GitHub Exploit DB Packet Storm
252442 4 警告 オラクル - OpenSSO Enterprise および Sun Java System Access Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0847 2011-05-16 11:38 2011-04-19 Show GitHub Exploit DB Packet Storm
252443 5 警告 オラクル - Oracle Sun Java System Access Manager Policy Agent における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0846 2011-05-16 11:37 2011-04-19 Show GitHub Exploit DB Packet Storm
252444 4.3 警告 オラクル - OpenSSO Enterprise および Sun Java System Access Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0844 2011-05-16 11:36 2011-04-19 Show GitHub Exploit DB Packet Storm
252445 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0843 2011-05-16 11:35 2011-04-19 Show GitHub Exploit DB Packet Storm
252446 7.8 危険 オラクル - Oracle Solaris 11 Express における TCP/IP の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0841 2011-05-16 11:34 2011-04-19 Show GitHub Exploit DB Packet Storm
252447 4 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0840 2011-05-16 11:33 2011-04-19 Show GitHub Exploit DB Packet Storm
252448 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Agile Technology Platform コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0837 2011-05-16 11:32 2011-04-19 Show GitHub Exploit DB Packet Storm
252449 3.5 注意 オラクル - Oracle JD Edwards EnterpriseOne Tools および OneWorld Tools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0836 2011-05-16 11:31 2011-04-19 Show GitHub Exploit DB Packet Storm
252450 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0834 2011-05-16 11:27 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310261 - - - Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without any preloaded data. This issue only affect… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2024-47773 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310262 - - - Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service (DoS). - CVE-2024-46539 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310263 - - - PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature - CVE-2024-46410 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310264 9.8 CRITICAL
Network 		- - Microsoft Configuration Manager Remote Code Execution Vulnerability CWE-89
SQL Injection 		CVE-2024-43468 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310265 - - - NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a… - CVE-2024-35215 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310266 8.0 HIGH
Adjacent 		- - Windows Hyper-V Remote Code Execution Vulnerability CWE-20
CWE-829
 Improper Input Validation 
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2024-30092 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310267 - - - An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted string. - CVE-2024-25885 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310268 7.1 HIGH
Adjacent 		- - Windows Hyper-V Security Feature Bypass Vulnerability CWE-20
 Improper Input Validation  		CVE-2024-20659 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310269 5.3 MEDIUM
Network 		- - A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is … CWE-444
HTTP Request Smuggling 		CVE-2024-9622 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
310270 5.3 MEDIUM
Network 		- - A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configura… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-9621 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm