Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254391	7.8	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における終端文字列の処理に関する重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-2495	2011-01-14 14:33	2009-07-28	Show	GitHub Exploit DB Packet Storm

254392	9.3	危険	サン・マイクロシステムズアドビシステムズ日本電気マイクロソフト OpenOffice.org Project	-	Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2493	2011-01-14 14:32	2009-07-28	Show	GitHub Exploit DB Packet Storm

254393	9.3	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0901	2011-01-14 14:31	2009-07-28	Show	GitHub Exploit DB Packet Storm

254394	6.9	警告	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3957	2011-01-13 16:22	2010-12-14	Show	GitHub Exploit DB Packet Storm

254395	9.3	危険	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3956	2011-01-13 16:19	2010-12-14	Show	GitHub Exploit DB Packet Storm

254396	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3346	2011-01-13 16:15	2010-12-14	Show	GitHub Exploit DB Packet Storm

254397	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3345	2011-01-13 16:11	2010-12-14	Show	GitHub Exploit DB Packet Storm

254398	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3343	2011-01-13 15:48	2010-12-14	Show	GitHub Exploit DB Packet Storm

254399	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3340	2011-01-13 15:43	2010-12-14	Show	GitHub Exploit DB Packet Storm

254400	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Advanced Audio Coding におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4395	2011-01-12 15:29	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310951	9.8	CRITICAL Network	xerox	freeflow_core	Pre-Auth RCE via Path Traversal	CWE-22 Path Traversal	CVE-2024-47557	2024-10-17 02:33	2024-10-8	Show	GitHub Exploit DB Packet Storm

310952	6.8	MEDIUM Adjacent	netgear	ex3700_firmware ex6100_firmware ex6120_firmware	Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.	CWE-77 Command Injection	CVE-2024-35519	2024-10-17 02:17	2024-10-15	Show	GitHub Exploit DB Packet Storm

310953	-		-	-	SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier version…	-	CVE-2024-35584	2024-10-17 02:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

310954	6.8	MEDIUM Adjacent	netgear	r7000_firmware	Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter.	CWE-77 Command Injection	CVE-2024-35520	2024-10-17 02:14	2024-10-15	Show	GitHub Exploit DB Packet Storm

310955	6.8	MEDIUM Adjacent	netgear	ex6120_firmware	Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.	CWE-77 Command Injection	CVE-2024-35518	2024-10-17 02:13	2024-10-15	Show	GitHub Exploit DB Packet Storm

310956	8.1	HIGH Network	gitlab	gitlab	An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. Instances with Product Analytics Dashbo…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-8977	2024-10-17 02:10	2024-10-10	Show	GitHub Exploit DB Packet Storm

310957	5.3	MEDIUM Network	gitlab	gitlab	An issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. It was possible for an unauthenticated a…	NVD-CWE-noinfo	CVE-2024-9596	2024-10-17 02:00	2024-10-10	Show	GitHub Exploit DB Packet Storm

310958	6.5	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys…	CWE-863 Incorrect Authorization	CVE-2024-9623	2024-10-17 01:59	2024-10-10	Show	GitHub Exploit DB Packet Storm

310959	5.4	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API	CWE-862 Missing Authorization	CVE-2024-48902	2024-10-17 01:57	2024-10-10	Show	GitHub Exploit DB Packet Storm

310960	9.8	CRITICAL Network	seur	seur	The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/ajax/saveCodFee.php’ endpoint.	CWE-89 SQL Injection	CVE-2024-9201	2024-10-17 01:55	2024-10-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed