Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252941	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0273	2010-02-23 11:58	2010-01-8	Show	GitHub Exploit DB Packet Storm

252942	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0272	2010-02-23 11:57	2010-01-8	Show	GitHub Exploit DB Packet Storm

252943	7.5	危険	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の Java Web Start 実装における署名された JAR ファイルと JNLP アプリケーション処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3886	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

252944	5	警告	アップル VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の TimeZone.getTimeZone メソッドにおけるローカルファイルの存在を知られる脆弱性	CWE-Other その他	CVE-2009-3884	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

252945	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Windows Pluggable Look and Feel (PL&F) における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3883	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

252946	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Swing 実装における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3882	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

252947	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK における権限を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3881	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

252948	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Abstract Window Toolkit (AWT) における情報漏えいの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3880	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

252949	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の X11 および Win32GraphicsDevice サブシステムにおける getConfigurations 関数による配列の複製に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3879	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

252950	5	警告	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の TrueType フォント解析機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3729	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304201	4.7	MEDIUM Local	cosmote	what\'s_up	A vulnerability, which was classified as problematic, has been found in Cosmote Greece What's Up App 4.47.3 on Android. This issue affects some unknown processing of the file gr/desquared/kmmsharedmo…	CWE-798 Use of Hard-coded Credentials	CVE-2024-10748	2024-11-7 00:06	2024-11-4	Show	GitHub Exploit DB Packet Storm

304202	9.8	CRITICAL Network	codezips	hospital_appointment_system	A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulati…	CWE-89 SQL Injection	CVE-2024-10791	2024-11-7 00:05	2024-11-5	Show	GitHub Exploit DB Packet Storm

304203	5.4	MEDIUM Network	phpgurukul	online_shopping_portal	A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/t…	CWE-79 Cross-site Scripting	CVE-2024-10768	2024-11-7 00:04	2024-11-5	Show	GitHub Exploit DB Packet Storm

304204	8.1	HIGH Network	thinkadmin	thinkadmin	A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argum…	CWE-502 Deserialization of Untrusted Data	CVE-2024-10749	2024-11-7 00:04	2024-11-4	Show	GitHub Exploit DB Packet Storm

304205	9.8	CRITICAL Network	projectworlds	travel_management_system	SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.	CWE-89 SQL Injection	CVE-2024-51327	2024-11-7 00:02	2024-11-5	Show	GitHub Exploit DB Packet Storm

304206	7.5	HIGH Network	projectworlds	travel_management_system	SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.	CWE-89 SQL Injection	CVE-2024-51326	2024-11-7 00:02	2024-11-5	Show	GitHub Exploit DB Packet Storm

304207	5.3	MEDIUM Network	openrefine	openrefine	OpenRefine is a free, open source tool for working with messy data. The load-language command expects a `lang` parameter from which it constructs the path of the localization file to load, of the for…	CWE-22 Path Traversal	CVE-2024-49760	2024-11-7 00:01	2024-10-25	Show	GitHub Exploit DB Packet Storm

304208	9.8	CRITICAL Network	codezips	free_exam_hall_seating_management_system	A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/save_user.php…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-10766	2024-11-6 23:59	2024-11-5	Show	GitHub Exploit DB Packet Storm

304209	7.3	HIGH Network	aftabhusain	enable_shortcodes_inside_widgets\ comments_and_experts	The The Enable Shortcodes inside Widgets,Comments and Experts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.0. This is due to the softw…	CWE-94 Code Injection	CVE-2024-9846	2024-11-6 23:58	2024-10-30	Show	GitHub Exploit DB Packet Storm

304210	5.5	MEDIUM Local	snowflake	snowflake_connector	The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Prior to version 3.12.3, when the loggin…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2024-49750	2024-11-6 23:58	2024-10-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed