Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252811	10	危険	Opera Software ASA	-	Opera における脆弱性	CWE-noinfo 情報不足	CVE-2009-4072	2010-09-27 16:16	2009-11-23	Show	GitHub Exploit DB Packet Storm

252812	5.8	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-16 環境設定	CVE-2009-4071	2010-09-27 16:16	2009-11-24	Show	GitHub Exploit DB Packet Storm

252813	5.8	警告	Opera Software ASA	-	Windows 上で稼働する Opera におけるアドレスフィールドを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2009-3832	2010-09-27 16:16	2009-10-28	Show	GitHub Exploit DB Packet Storm

252814	5	警告	Opera Software ASA	-	Opera におけるフィッシング攻撃の脆弱性	CWE-Other その他	CVE-2009-3049	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

252815	4.3	警告	Opera Software ASA	-	Opera における意図しないファイルをアップロードさせられる脆弱性	CWE-20 不適切な入力確認	CVE-2009-3048	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

252816	4.3	警告	Opera Software ASA	-	Opera における URL を偽装される脆弱性	CWE-Other その他	CVE-2009-3047	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

252817	5	警告	Opera Software ASA	-	Opera における証明書チェーンの有効性を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3046	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

252818	5	警告	Opera Software ASA	-	Opera における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3045	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

252819	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3831	2010-09-27 16:14	2009-10-28	Show	GitHub Exploit DB Packet Storm

252820	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3269	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
309281	6.5	MEDIUM Network	syscomgo	omflow	OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of ot…	NVD-CWE-noinfo	CVE-2024-8780	2024-09-20 23:35	2024-09-16	Show	GitHub Exploit DB Packet Storm

309282	6.5	MEDIUM Network	syscomgo	omflow	OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files.	CWE-22 Path Traversal	CVE-2024-8778	2024-09-20 23:23	2024-09-16	Show	GitHub Exploit DB Packet Storm

309283	7.5	HIGH Network	syscomgo	omflow	OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can…	CWE-522 Insufficiently Protected Credentials	CVE-2024-8777	2024-09-20 23:22	2024-09-16	Show	GitHub Exploit DB Packet Storm

309284	6.5	MEDIUM Network	ibm	aspera_shares	IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.	CWE-613 Insufficient Session Expiration	CVE-2024-38315	2024-09-20 23:09	2024-09-17	Show	GitHub Exploit DB Packet Storm

309285	7.8	HIGH Local	mattermost	mattermost_desktop	Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of …	CWE-427 Uncontrolled Search Path Element	CVE-2024-39613	2024-09-20 22:59	2024-09-16	Show	GitHub Exploit DB Packet Storm

309286	5.3	MEDIUM Physics	rfideas	micard_plus_ci_firmware micard_plus_ble_firmware	The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card read…	NVD-CWE-noinfo	CVE-2024-1578	2024-09-20 22:53	2024-09-16	Show	GitHub Exploit DB Packet Storm

309287	6.1	MEDIUM Network	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible	CWE-79 Cross-site Scripting	CVE-2024-46970	2024-09-20 22:23	2024-09-16	Show	GitHub Exploit DB Packet Storm

309288	5.0	MEDIUM Network	nozominetworks	cmc guardian	An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with r…	CWE-863 Incorrect Authorization	CVE-2024-4465	2024-09-20 22:15	2024-09-12	Show	GitHub Exploit DB Packet Storm

309289	5.5	MEDIUM Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1380_firmware exynos_1330_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_b…	CWE-787 Out-of-bounds Write	CVE-2024-27365	2024-09-20 22:09	2024-09-10	Show	GitHub Exploit DB Packet Storm

309290	7.2	HIGH Network	mailcow	mailcow\	mailcow: dockerized is an open source groupware/email suite based on docker. A vulnerability has been discovered in the two-factor authentication (2FA) mechanism. This flaw allows an authenticated at…	NVD-CWE-noinfo	CVE-2024-41958	2024-09-20 21:58	2024-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed