Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253501	9.3	危険	アップルサイバートラスト株式会社レッドハットオラクル Info-ZIP	-	UnZip の NEEDBITS マクロにおける無効なバッファ領域を参照してしまう問題	CWE-119 バッファエラー	CVE-2008-0888	2010-12-15 12:37	2008-03-17	Show	GitHub Exploit DB Packet Storm

253502	6	警告	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Tcl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1170	2010-12-15 12:35	2010-05-17	Show	GitHub Exploit DB Packet Storm

253503	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1169	2010-12-15 12:31	2010-05-17	Show	GitHub Exploit DB Packet Storm

253504	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3753	2010-12-14 14:24	2010-09-27	Show	GitHub Exploit DB Packet Storm

253505	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3752	2010-12-14 14:22	2010-09-27	Show	GitHub Exploit DB Packet Storm

253506	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3308	2010-12-14 14:20	2010-09-27	Show	GitHub Exploit DB Packet Storm

253507	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3302	2010-12-14 14:15	2010-09-27	Show	GitHub Exploit DB Packet Storm

253508	4.3	警告	freedesktop.org レッドハット	-	Poppler の PDF パーサ内にある poppler/Function.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3703	2010-12-13 16:04	2010-11-5	Show	GitHub Exploit DB Packet Storm

253509	8.3	危険	Linux レッドハット	-	Linux kernel の sctp_auth_asoc_get_hmac 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3705	2010-12-13 15:57	2010-10-20	Show	GitHub Exploit DB Packet Storm

253510	6.6	警告	Linux レッドハット	-	Linux kernel の pkt_find_dev_from_minor 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-3437	2010-12-13 15:41	2010-10-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312131	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the flushoncommit mount option, during almost…	CWE-667 Improper Locking	CVE-2022-48920	2024-09-12 22:04	2024-08-22	Show	GitHub Exploit DB Packet Storm

312132	4.7	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweight_entity Syzbot found a GPF in reweight_entity. This has been bisected to commit 4ef0c5c6b5ba ("k…	CWE-362 Race Condition	CVE-2022-48921	2024-09-12 21:58	2024-08-22	Show	GitHub Exploit DB Packet Storm

312133	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The trace_hardirqs_{on,off}() require the caller to setup frame pointer properly…	CWE-476 NULL Pointer Dereference	CVE-2022-48922	2024-09-12 21:52	2024-08-22	Show	GitHub Exploit DB Packet Storm

312134	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted to be a lot larger than memory we have a…	CWE-787 Out-of-bounds Write	CVE-2022-48923	2024-09-12 21:50	2024-08-22	Show	GitHub Exploit DB Packet Storm

312135	7.2	HIGH Network	lifterlms	lifterlms	The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to …	CWE-89 SQL Injection	CVE-2024-7349	2024-09-12 21:43	2024-09-6	Show	GitHub Exploit DB Packet Storm

312136	9.8	CRITICAL Network	plechevandrey	wp-recall	The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and including, 16.26.8. This is due to to plu…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-8292	2024-09-12 21:37	2024-09-6	Show	GitHub Exploit DB Packet Storm

312137	-		-	-	A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical. Affected by this issue is the function GetDat…	CWE-89 SQL Injection	CVE-2024-8705	2024-09-12 21:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

312138	-		-	-	A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component com.cms.controller.ad…	CWE-22 Path Traversal	CVE-2024-8694	2024-09-12 21:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

312139	-		-	-	A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipula…	CWE-79 Cross-site Scripting	CVE-2024-8693	2024-09-12 21:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

312140	-		-	-	evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."	-	CVE-2024-44541	2024-09-12 21:35	2024-09-12	Show	GitHub Exploit DB Packet Storm