Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252821	6.4	警告	VMware	-	VMware ACE の ACE 共有フォルダ実装における無効にされた共有フォルダを有効にされる脆弱性	CWE-noinfo 情報不足	CVE-2009-0908	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

252822	2.1	注意	VMware	-	複数の VMware 製品の VI Client におけるパスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2009-0518	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

252823	4.4	警告	KVM レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0419	2010-03-23 14:09	2010-03-1	Show	GitHub Exploit DB Packet Storm

252824	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0263	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

252825	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0262	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

252826	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0261	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

252827	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0260	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

252828	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0258	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

252829	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0264	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

252830	9.3	危険	マイクロソフト	-	Microsoft Office Excel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0257	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
308241	6.1	MEDIUM Network	acquia	mautic	Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.	CWE-79 Cross-site Scripting	CVE-2024-47050	2024-09-28 00:29	2024-09-19	Show	GitHub Exploit DB Packet Storm

308242	8.8	HIGH Network	purestorage	purity\/\/fa purity\/\/fb	A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.	CWE-77 Command Injection	CVE-2024-0005	2024-09-28 00:25	2024-09-24	Show	GitHub Exploit DB Packet Storm

308243	5.4	MEDIUM Network	acquia	mautic	Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.	CWE-79 Cross-site Scripting	CVE-2021-27917	2024-09-28 00:13	2024-09-19	Show	GitHub Exploit DB Packet Storm

308244	-		-	-	WoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the Apache Ant script functionality.	-	CVE-2024-37779	2024-09-27 23:35	2024-09-24	Show	GitHub Exploit DB Packet Storm

308245	5.4	MEDIUM Network	happyforms	happyforms	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Happyforms allows Stored XSS.This issue affects Happyforms: from n/a through 1.26.0.	CWE-79 Cross-site Scripting	CVE-2024-44063	2024-09-27 23:31	2024-09-15	Show	GitHub Exploit DB Packet Storm

308246	7.2	HIGH Network	purestorage	purity\/\/fa	A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.	CWE-94 Code Injection	CVE-2024-0004	2024-09-27 23:24	2024-09-24	Show	GitHub Exploit DB Packet Storm

308247	7.2	HIGH Network	purestorage	purity\/\/fa	A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access.	NVD-CWE-noinfo	CVE-2024-0003	2024-09-27 23:23	2024-09-24	Show	GitHub Exploit DB Packet Storm

308248	9.8	CRITICAL Network	purestorage	purity\/\/fa	A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.	NVD-CWE-noinfo	CVE-2024-0002	2024-09-27 23:13	2024-09-24	Show	GitHub Exploit DB Packet Storm

308249	9.8	CRITICAL Network	purestorage	purity\/\/fa	A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.	CWE-1188 Insecure Default Initialization of Resource	CVE-2024-0001	2024-09-27 23:08	2024-09-24	Show	GitHub Exploit DB Packet Storm

308250	6.1	MEDIUM Network	jenniferhall	filmix	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jennifer Hall Filmix allows Reflected XSS.This issue affects Filmix: from n/a through 1.1.	CWE-79 Cross-site Scripting	CVE-2024-44060	2024-09-27 23:04	2024-09-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed