Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253641	7.1	危険	アップルアドビシステムズ	-	Windows 上で稼動する Adobe Flash Player および Adobe AIR の Flash Player の ActiveX コントロールにおけるローカルファイルのファイル名を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3951	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

253642	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3800	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

253643	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR の Verifier::parseExceptionHandlers 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3799	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

253644	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3798	2010-02-10 13:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

253645	9.3	危険	マイクロソフト	-	Microsoft Windows XP で提供される Adobe Flash Player 6 における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0378	2010-02-9 13:56	2010-01-12	Show	GitHub Exploit DB Packet Storm

253646	9.3	危険	マイクロソフト	-	Microsoft Windows の Embedded OpenType フォントエンジンにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0018	2010-02-9 13:55	2010-01-12	Show	GitHub Exploit DB Packet Storm

253647	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるファイル拡張子の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3461	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

253648	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3460	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

253649	4.3	警告	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-2995	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

253650	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-2989	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
308101	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: fix deadlock in show_meminfo() There is a real deadlock as well as sleeping in atomic() bug in here, if the bo put…	CWE-667 Improper Locking	CVE-2024-46867	2024-10-2 02:09	2024-09-27	Show	GitHub Exploit DB Packet Storm

308102	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: add missing bo locking in show_meminfo() bo_meminfo() wants to inspect bo state like tt and the ttm resource, howe…	CWE-667 Improper Locking	CVE-2024-46866	2024-10-2 02:09	2024-09-27	Show	GitHub Exploit DB Packet Storm

308103	6.5	MEDIUM Network	devolutions	devolutions_server	Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing inte…	CWE-863 Incorrect Authorization	CVE-2024-6512	2024-10-2 01:36	2024-09-25	Show	GitHub Exploit DB Packet Storm

308104	9.8	CRITICAL Network	doverfuelingsolutions	progauge_maglink_lx_console_firmware progauge_maglink_lx4_console_firmware	An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.	NVD-CWE-Other	CVE-2024-43692	2024-10-2 01:22	2024-09-25	Show	GitHub Exploit DB Packet Storm

308105	9.8	CRITICAL Network	doverfuelingsolutions	progauge_maglink_lx_console_firmware progauge_maglink_lx4_console_firmware	A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.	CWE-77 Command Injection	CVE-2024-45066	2024-10-2 01:18	2024-09-25	Show	GitHub Exploit DB Packet Storm

308106	8.8	HIGH Network	doverfuelingsolutions	progauge_maglink_lx_console_firmware progauge_maglink_lx4_console_firmware	Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.	NVD-CWE-noinfo	CVE-2024-45373	2024-10-2 01:13	2024-09-25	Show	GitHub Exploit DB Packet Storm

308107	9.1	CRITICAL Network	watchguard	single_sign-on_client authentication_gateway	Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Win…	CWE-863 Incorrect Authorization	CVE-2024-6592	2024-10-2 01:06	2024-09-25	Show	GitHub Exploit DB Packet Storm

308108	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() function is only used for DP83822 and DP83826 PHY,…	CWE-476 NULL Pointer Dereference	CVE-2024-46856	2024-10-2 01:04	2024-09-27	Show	GitHub Exploit DB Packet Storm

308109	4.2	MEDIUM Adjacent	jktyre	smart_tyre_car_\&_bike	An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications.	CWE-294 Authentication Bypass by Capture-replay	CVE-2024-39081	2024-10-2 00:51	2024-09-18	Show	GitHub Exploit DB Packet Storm

308110	8.8	HIGH Adjacent	circutor	q-smt_firmware	An attacker with access to the network where the CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could obtain legitimate credentials or steal sessions due to the fact that the device only im…	NVD-CWE-Other	CVE-2024-8890	2024-10-2 00:46	2024-09-18	Show	GitHub Exploit DB Packet Storm