Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253141	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1237	2011-05-9 11:49	2011-04-12	Show	GitHub Exploit DB Packet Storm

253142	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1236	2011-05-9 11:48	2011-04-12	Show	GitHub Exploit DB Packet Storm

253143	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1235	2011-05-9 11:46	2011-04-12	Show	GitHub Exploit DB Packet Storm

253144	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3704	2011-05-9 11:29	2010-10-7	Show	GitHub Exploit DB Packet Storm

253145	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3702	2011-05-9 11:26	2010-10-7	Show	GitHub Exploit DB Packet Storm

253146	7.5	危険	サイバートラスト株式会社 The Perl Foundation レッドハットオラクル	-	Perl の Safe モジュールにおける任意のコードを挿入または実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1168	2011-05-9 11:13	2010-06-7	Show	GitHub Exploit DB Packet Storm

253147	9.3	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla NSS の正規表現の解析における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2404	2011-05-9 11:11	2009-08-1	Show	GitHub Exploit DB Packet Storm

253148	7.5	危険	アップルサイバートラスト株式会社 xmlsoft.org レッドハットオラクル	-	libxslt の pattern.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1767	2011-05-9 11:07	2008-05-21	Show	GitHub Exploit DB Packet Storm

253149	9.3	危険	レッドハット GNOME Project オラクル	-	Evolution の iCalendar 添付ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1109	2011-05-9 11:04	2008-06-4	Show	GitHub Exploit DB Packet Storm

253150	7.6	危険	レッドハット GNOME Project オラクル	-	Evolution のタイムゾーン処理に関するバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1108	2011-05-9 10:51	2008-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310931	8.1	HIGH Network	shilpisoft	client_dashboard	This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their co…	NVD-CWE-Other	CVE-2024-47652	2024-10-16 23:12	2024-10-4	Show	GitHub Exploit DB Packet Storm

310932	5.7	MEDIUM Network	enalean	tuleap	Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2024-46988	2024-10-16 23:07	2024-10-15	Show	GitHub Exploit DB Packet Storm

310933	5.4	MEDIUM Network	ultimatemember	ultimate_member	The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '…	CWE-79 Cross-site Scripting	CVE-2024-8519	2024-10-16 23:06	2024-10-4	Show	GitHub Exploit DB Packet Storm

310934	4.8	MEDIUM Network	enalean	tuleap	Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15…	CWE-79 Cross-site Scripting	CVE-2024-46980	2024-10-16 23:05	2024-10-15	Show	GitHub Exploit DB Packet Storm

310935	7.5	HIGH Network	acronis	cyber_protect	Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2024-49387	2024-10-16 22:58	2024-10-15	Show	GitHub Exploit DB Packet Storm

310936	9.1	CRITICAL Network	acronis	cyber_protect	Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-49388	2024-10-16 22:57	2024-10-15	Show	GitHub Exploit DB Packet Storm

310937	4.3	MEDIUM Adjacent	acronis	cyber_protect	Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.	NVD-CWE-Other	CVE-2024-49383	2024-10-16 22:53	2024-10-15	Show	GitHub Exploit DB Packet Storm

310938	4.3	MEDIUM Adjacent	acronis	cyber_protect	Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.	NVD-CWE-Other	CVE-2024-49382	2024-10-16 22:53	2024-10-15	Show	GitHub Exploit DB Packet Storm

310939	4.3	MEDIUM Adjacent	acronis	cyber_protect	Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.	NVD-CWE-Other	CVE-2024-49384	2024-10-16 22:52	2024-10-15	Show	GitHub Exploit DB Packet Storm

310940	7.8	HIGH Local	electronics.jtekt	kostac_plc_programming_software	Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project f…	CWE-787 Out-of-bounds Write	CVE-2024-47134	2024-10-16 22:50	2024-10-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed