Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253311	6.5	警告	Dolibarr ERP & CRM	-	Dolibarr における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4802	2011-12-16 10:50	2011-11-3	Show	GitHub Exploit DB Packet Storm

253312	4.3	警告	Jextensions	-	Joomla! 用 HM Community コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4809	2011-12-16 10:44	2011-12-14	Show	GitHub Exploit DB Packet Storm

253313	7.5	危険	Jextensions	-	Joomla! 用 HM Community コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4808	2011-12-16 10:41	2011-12-14	Show	GitHub Exploit DB Packet Storm

253314	5	警告	foobla	-	Joomla! 用の obSuggest コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4804	2011-12-16 10:19	2011-12-14	Show	GitHub Exploit DB Packet Storm

253315	7.5	危険	BraveNewCode	-	WordPress 用の WPTouch プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4803	2011-12-16 10:18	2011-12-14	Show	GitHub Exploit DB Packet Storm

253316	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC RSA AAOP におけるアプリケーション制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2742	2011-12-15 16:59	2011-12-14	Show	GitHub Exploit DB Packet Storm

253317	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC RSA AAOP におけるセキュリティ制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2741	2011-12-15 16:58	2011-12-14	Show	GitHub Exploit DB Packet Storm

253318	4.3	警告	アドビシステムズ	-	Adobe ColdFusion の RDS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4368	2011-12-15 16:57	2011-12-13	Show	GitHub Exploit DB Packet Storm

253319	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2463	2011-12-15 16:57	2011-12-13	Show	GitHub Exploit DB Packet Storm

253320	4.3	警告	アップル	-	iOS 上の Safari におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2011-12-15 12:02	2011-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318261	5.4	MEDIUM Network	cloudcannon	pagefinder	Pagefind, a fully static search library, initializes its dynamic JavaScript and WebAssembly files relative to the location of the first script the user loads. This information is gathered by looking …	CWE-79 Cross-site Scripting	CVE-2024-45389	2024-09-13 05:17	2024-09-4	Show	GitHub Exploit DB Packet Storm

318262	-		-	-	Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-45593. Reason: This record is a reservation duplicate of CVE-2024-45593. Notes: All CVE users should reference CVE-2024-45593 instea…	-	CVE-2024-45845	2024-09-13 05:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

318263	9.8	CRITICAL Network	blakeembrey	template	@blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the attacker has access to write the template name. Version 1.…	CWE-94 Code Injection	CVE-2024-45390	2024-09-13 05:15	2024-09-4	Show	GitHub Exploit DB Packet Storm

318264	7.5	HIGH Network	tina	tina	Tina is an open-source content management system (CMS). Sites building with Tina CMS's command line interface (CLI) prior to version 1.6.2 that use a search token may be vulnerable to the search toke…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-45391	2024-09-13 05:13	2024-09-4	Show	GitHub Exploit DB Packet Storm

318265	4.2	MEDIUM Physics	yubico	yubikey_5c_nfc_firmware yubikey_5_nfc_firmware yubikey_5c_firmware yubikey_5_nano_firmware yubikey_5c_nano_firmware yubikey_5ci_firmware yubikey_5_nfc_fips_firmware yubikey_5c_nf…	Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive eq…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-45678	2024-09-13 05:07	2024-09-4	Show	GitHub Exploit DB Packet Storm

318266	4.7	MEDIUM Network	mozilla	firefox_focus	Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects Focus for iOS < 130.	NVD-CWE-noinfo	CVE-2024-8399	2024-09-13 04:45	2024-09-4	Show	GitHub Exploit DB Packet Storm

318267	7.5	HIGH Network	huawei	emui harmonyos	Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality.	NVD-CWE-noinfo	CVE-2024-42039	2024-09-13 04:37	2024-09-4	Show	GitHub Exploit DB Packet Storm

318268	7.5	HIGH Network	huawei	emui harmonyos	Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.	NVD-CWE-noinfo	CVE-2024-45441	2024-09-13 04:35	2024-09-4	Show	GitHub Exploit DB Packet Storm

318269	7.5	HIGH Network	huawei	emui harmonyos	Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	NVD-CWE-noinfo	CVE-2024-45450	2024-09-13 04:30	2024-09-4	Show	GitHub Exploit DB Packet Storm

318270	7.8	HIGH Local	intel	tdx_module_software	Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local acces…	NVD-CWE-Other	CVE-2024-39283	2024-09-13 04:15	2024-08-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed