Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253691	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3791	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

253692	5.8	警告	PostgreSQL.org ターボリナックスサン・マイクロシステムズ	-	PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4034	2010-01-26 11:48	2009-12-15	Show	GitHub Exploit DB Packet Storm

253693	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4031	2010-01-26 11:47	2009-11-29	Show	GitHub Exploit DB Packet Storm

253694	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3613	2010-01-26 11:38	2009-10-19	Show	GitHub Exploit DB Packet Storm

253695	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の NFSv4 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3286	2010-01-26 11:38	2009-09-22	Show	GitHub Exploit DB Packet Storm

253696	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2009-2908	2010-01-26 11:38	2009-10-13	Show	GitHub Exploit DB Packet Storm

253697	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2009-2695	2010-01-26 11:38	2009-08-28	Show	GitHub Exploit DB Packet Storm

253698	9.3	危険	アップルサイバートラスト株式会社サン・マイクロシステムズレッドハット	-	JDK および JRE の Sun Java SE にある Deployment Toolkit プラグインにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3865	2010-01-26 11:37	2009-11-3	Show	GitHub Exploit DB Packet Storm

253699	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の tc_fill_tclass 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3228	2010-01-26 11:37	2009-10-19	Show	GitHub Exploit DB Packet Storm

253700	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo32 コーデックの ir32_32.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-4313	2010-01-25 11:53	2009-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
308791	6.1	MEDIUM Network	intumit	smartrobot_firmware	SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting at…	CWE-79 Cross-site Scripting	CVE-2024-8776	2024-09-21 01:38	2024-09-16	Show	GitHub Exploit DB Packet Storm

308792	2.4	LOW Adjacent	qnap	qts quts_hero	An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local networ…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2024-32771	2024-09-21 01:38	2024-09-7	Show	GitHub Exploit DB Packet Storm

308793	7.5	HIGH Network	openjsf	body-parser	body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood th…	NVD-CWE-noinfo	CVE-2024-45590	2024-09-21 01:26	2024-09-11	Show	GitHub Exploit DB Packet Storm

308794	2.7	LOW Network	fortinet	fortiedrmanager	An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permiss…	NVD-CWE-Other	CVE-2024-45323	2024-09-21 01:23	2024-09-11	Show	GitHub Exploit DB Packet Storm

308795	5.3	MEDIUM Network	lizardbyte	sunshine	Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing a…	NVD-CWE-noinfo	CVE-2024-45407	2024-09-21 01:18	2024-09-11	Show	GitHub Exploit DB Packet Storm

308796	4.7	MEDIUM Network	openjsf	express	Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched i…	CWE-79 Cross-site Scripting	CVE-2024-43796	2024-09-21 01:07	2024-09-11	Show	GitHub Exploit DB Packet Storm

308797	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease It is not safe to dereference fl->c.flc_owner without fir…	NVD-CWE-noinfo	CVE-2024-46690	2024-09-21 00:55	2024-09-13	Show	GitHub Exploit DB Packet Storm

308798	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protec…	CWE-787 Out-of-bounds Write	CVE-2024-46689	2024-09-21 00:52	2024-09-13	Show	GitHub Exploit DB Packet Storm

308799	9.8	CRITICAL Network	h2o	h2o	A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4. This issue affects the function getConnectionSafe of the file /dtale/chart-data/1 of the component JDBC Conn…	CWE-502 Deserialization of Untrusted Data	CVE-2024-8862	2024-09-21 00:47	2024-09-15	Show	GitHub Exploit DB Packet Storm

308800	5.4	MEDIUM Network	aimstack	aim	A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file textbox.tsx of the component Text Explorer. Th…	CWE-79 Cross-site Scripting	CVE-2024-8863	2024-09-21 00:43	2024-09-15	Show	GitHub Exploit DB Packet Storm