Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252531 9.3 危険 アドビシステムズ - Adobe Shockwave Player の TextXtra.x32 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2582 2010-11-17 16:49 2010-10-28 Show GitHub Exploit DB Packet Storm
252532 9.3 危険 アドビシステムズ - Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2581 2010-11-17 16:48 2010-10-28 Show GitHub Exploit DB Packet Storm
252533 9.3 危険 アドビシステムズ - Adobe Shockwave Player に脆弱性 CWE-119
バッファエラー
CVE-2010-3653 2010-11-16 14:49 2010-10-25 Show GitHub Exploit DB Packet Storm
252534 7.5 危険 富士通 - Interstage Application Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6258 2010-11-16 14:48 2008-02-19 Show GitHub Exploit DB Packet Storm
252535 6.5 警告 アップル
サイバートラスト株式会社
MySQL AB
ターボリナックス
レッドハット
- MySQL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1848 2010-11-15 16:20 2010-05-5 Show GitHub Exploit DB Packet Storm
252536 5 警告 サイバートラスト株式会社
Zabbix
- Zabbix サーバの trapper/trapper.c 内にある process_trap 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-4500 2010-11-15 15:41 2009-07-21 Show GitHub Exploit DB Packet Storm
252537 9.3 危険 サイバートラスト株式会社
Zabbix
- Zabbix Agent の net.c 内にある NET_TCP_LISTEN 関数における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4502 2010-11-15 15:41 2009-09-10 Show GitHub Exploit DB Packet Storm
252538 5 警告 サイバートラスト株式会社
Zabbix
- Zabbix サーバの zbx_get_next_field 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-4501 2010-11-15 15:40 2009-11-25 Show GitHub Exploit DB Packet Storm
252539 7.5 危険 サイバートラスト株式会社
Zabbix
- Zabbix サーバの get_history_lastid 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4499 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
252540 6.8 警告 サイバートラスト株式会社
Zabbix
- Zabbix サーバの node_process_command 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2009-4498 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305671 3.7 LOW
Network
- - Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability… - CVE-2024-21210 2024-10-31 22:35 2024-10-16 Show GitHub Exploit DB Packet Storm
305672 3.7 LOW
Network
- - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java… - CVE-2024-21208 2024-10-31 22:35 2024-10-16 Show GitHub Exploit DB Packet Storm
305673 3.3 LOW
Local
mongodb mongo_crypt_v1.so
mongocryptd
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciph… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2024-8013 2024-10-31 22:33 2024-10-28 Show GitHub Exploit DB Packet Storm
305674 9.8 CRITICAL
Network
codezips hospital_appointment_system A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument U… CWE-89
SQL Injection
CVE-2024-10449 2024-10-31 21:47 2024-10-29 Show GitHub Exploit DB Packet Storm
305675 8.8 HIGH
Network
google chrome Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion
CVE-2024-10230 2024-10-31 17:35 2024-10-23 Show GitHub Exploit DB Packet Storm
305676 8.8 HIGH
Network
projectworlds online_time_table_generator A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vulnerability is an unknown functionality of the file /timetable/staff/staffdashbo… CWE-89
SQL Injection
CVE-2024-10447 2024-10-31 10:23 2024-10-28 Show GitHub Exploit DB Packet Storm
305677 5.3 MEDIUM
Network
cisco adaptive_security_appliance_software A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for the SSH server o… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2024-20526 2024-10-31 10:08 2024-10-24 Show GitHub Exploit DB Packet Storm
305678 6.5 MEDIUM
Network
libsndfile_project libsndfile libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close. CWE-617
 Reachable Assertion
CVE-2024-50613 2024-10-31 09:58 2024-10-28 Show GitHub Exploit DB Packet Storm
305679 7.5 HIGH
Network
sun.net ehdr_ctms The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order to access certain f… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2024-10438 2024-10-31 09:52 2024-10-28 Show GitHub Exploit DB Packet Storm
305680 7.5 HIGH
Network
sun.net ehdr_ctms The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to access arbitrary files uploaded by … CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-10439 2024-10-31 09:35 2024-10-28 Show GitHub Exploit DB Packet Storm