Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252701	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0131	2011-03-31 14:01	2011-03-3	Show	GitHub Exploit DB Packet Storm

252702	9.3	危険	BlackBerry	-	BlackBerry Enterprise Server の PDF Distiller におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2604	2011-03-31 13:59	2011-01-11	Show	GitHub Exploit DB Packet Storm

252703	6.8	警告	BlackBerry	-	BlackBerry Device Software のブラウザにおける同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3934	2011-03-31 13:57	2010-10-14	Show	GitHub Exploit DB Packet Storm

252704	6	警告	アップルサイバートラスト株式会社 CUPS ターボリナックスオラクルレッドハット	-	Apple Mac OS X 上で稼働する CUPS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0540	2011-03-31 13:55	2010-06-15	Show	GitHub Exploit DB Packet Storm

252705	6.9	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS の cupsFileOpen 関数における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-2431	2011-03-31 13:54	2010-06-17	Show	GitHub Exploit DB Packet Storm

252706	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS のテキストフィルタサブシステムにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0542	2011-03-31 13:53	2010-06-17	Show	GitHub Exploit DB Packet Storm

252707	7.9	危険	アップルサイバートラスト株式会社レッドハットオラクル CUPS	-	CUPS の cupsd 内にある ipp.c における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2941	2011-03-31 13:51	2010-11-11	Show	GitHub Exploit DB Packet Storm

252708	4.3	警告	アップルサイバートラスト株式会社 CUPS ターボリナックスオラクルレッドハット	-	Apple Mac OS X 上で稼働する CUPS における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2010-1748	2011-03-31 13:45	2010-06-15	Show	GitHub Exploit DB Packet Storm

252709	6.9	警告	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における権限昇格の脆弱性	CWE-Other その他	CVE-2011-0575	2011-03-31 13:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

252710	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0130	2011-03-30 15:55	2011-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310381	6.1	MEDIUM Network	ckeditor	ckeditor5	CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting (XSS) vulnerability is present in the CKEditor 5 clipboard package. This vu…	CWE-79 Cross-site Scripting	CVE-2024-45613	2024-10-2 07:15	2024-09-25	Show	GitHub Exploit DB Packet Storm

310382	6.5	MEDIUM Network	apache	druid	Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid a…	NVD-CWE-noinfo	CVE-2024-45537	2024-10-2 05:41	2024-09-18	Show	GitHub Exploit DB Packet Storm

310383	7.8	HIGH Local	restsharp	restsharp	RestSharp is a Simple REST and HTTP API Client for .NET. The second argument to `RestRequest.AddHeader` (the header value) is vulnerable to CRLF injection. The same applies to `RestRequest.AddOrUpdat…	CWE-74 Injection	CVE-2024-45302	2024-10-2 05:05	2024-08-30	Show	GitHub Exploit DB Packet Storm

310384	8.0	HIGH Network	strawberryrocks	strawberry	Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in …	CWE-352 Origin Validation Error	CVE-2024-47082	2024-10-2 05:01	2024-09-26	Show	GitHub Exploit DB Packet Storm

310385	7.5	HIGH Network	watchguard	single_sign-on_client	Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network acc…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2024-6594	2024-10-2 04:41	2024-09-25	Show	GitHub Exploit DB Packet Storm

310386	9.1	CRITICAL Network	watchguard	authentication_gateway	Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. This…	CWE-863 Incorrect Authorization	CVE-2024-6593	2024-10-2 04:37	2024-09-25	Show	GitHub Exploit DB Packet Storm

310387	7.5	HIGH Network	circutor	q-smt_firmware	An attacker with access to the network where CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could steal the tokens used on the web, since these have no expiration date to access the web app…	CWE-613 Insufficient Session Expiration	CVE-2024-8888	2024-10-2 04:30	2024-09-18	Show	GitHub Exploit DB Packet Storm

310388	7.8	HIGH Local	grafana	alloy	Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-r…	CWE-428 Unquoted Search Path or Element	CVE-2024-8975	2024-10-2 04:20	2024-09-26	Show	GitHub Exploit DB Packet Storm

310389	7.8	HIGH Local	grafana	agent	Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2	CWE-428 Unquoted Search Path or Element	CVE-2024-8996	2024-10-2 04:16	2024-09-26	Show	GitHub Exploit DB Packet Storm

310390	7.5	HIGH Network	openslides	openslides	OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.	CWE-326 Inadequate Encryption Strength	CVE-2024-22892	2024-10-2 04:10	2024-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed