Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253191 6.4 警告 シスコシステムズ - CSG2 上で稼働する Cisco IOS におけるアクセスおよび課金などの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0348 2011-02-22 13:44 2011-01-26 Show GitHub Exploit DB Packet Storm
253192 4.3 警告 Google - Android の com.android.phone プロセスにおけるサービス運用妨害 (DoS) 脆弱性 CWE-noinfo
情報不足 		CVE-2009-2999 2011-02-22 11:32 2009-10-14 Show GitHub Exploit DB Packet Storm
253193 5 警告 Google - Android の com.android.phone プロセスにおけるサービス運用妨害 (DoS) 脆弱性 CWE-noinfo
情報不足 		CVE-2009-2656 2011-02-22 11:28 2009-08-3 Show GitHub Exploit DB Packet Storm
253194 7.5 危険 OpenBSD - OpenSSH における共有秘密鍵の認証要求を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-4478 2011-02-21 16:53 2010-12-6 Show GitHub Exploit DB Packet Storm
253195 5 警告 レッドハット - IcedTea における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3860 2011-02-21 16:53 2010-12-8 Show GitHub Exploit DB Packet Storm
253196 6.8 警告 レッドハット - IcedTea の JNLP SecurityManager におけるセキュリティポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4351 2011-02-21 14:58 2011-01-20 Show GitHub Exploit DB Packet Storm
253197 4.3 警告 シマンテック - Symantec Norton Mobile Security for Android における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-0113 2011-02-21 14:55 2010-11-15 Show GitHub Exploit DB Packet Storm
253198 4.3 警告 Google - Android の Dalvik API におけるサービス運用妨害 (DoS) 脆弱性 CWE-noinfo
情報不足 		CVE-2009-3698 2011-02-21 14:54 2009-10-14 Show GitHub Exploit DB Packet Storm
253199 5 警告 CollabNet, Inc. - CollabNet ScrumWorks Basic Server における認証情報取り扱いに関する問題 CWE-310
暗号の問題 		CVE-2011-0410 2011-02-21 14:54 2011-01-24 Show GitHub Exploit DB Packet Storm
253200 5 警告 The PHP Group
レッドハット		 - Libmbfl の mb_strcut 関数における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4156 2011-02-18 15:07 2010-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311911 - - - Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext. - CVE-2023-41610 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311912 - - - Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.0.0` filter a user may bypass this block by using … CWE-284
Improper Access Control 		CVE-2024-46990 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311913 - - - find-my-way is a fast, open source HTTP router, internally using a Radix Tree (aka compact Prefix Tree), supports route params, wildcards, and it's framework independent. A bad regular expression is … CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2024-45813 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311914 - - - Wiki.js is an open source wiki app built on Node.js. A disabled user can still gain access to a wiki by abusing the password reset function. While setting up SMTP e-mail's on my server, I tested said… CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2024-45298 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311915 - - - exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication. - CVE-2023-47105 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311916 - - - An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a malicious… - CVE-2024-45858 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311917 - - - SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter. - CVE-2024-44542 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311918 - - - Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code. - CVE-2024-35515 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311919 - - - Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a larg… - CVE-2023-49203 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
311920 - - - An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful. - CVE-2023-28457 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm