Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254641	9	危険	オラクル	-	Oracle Database の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3415	2010-02-12 12:20	2010-01-12	Show	GitHub Exploit DB Packet Storm

254642	10	危険	オラクル	-	Oracle Database の Listener コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0071	2010-02-12 12:20	2010-01-12	Show	GitHub Exploit DB Packet Storm

254643	5	警告	Pidgin Adium レッドハット	-	Pidgin および Adium の MSN プロトコルプラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0013	2010-02-10 13:39	2010-01-8	Show	GitHub Exploit DB Packet Storm

254644	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の U3D 実装における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-3959	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

254645	10	危険	アドビシステムズ	-	Adobe Reader および Acrobat のダウンロードマネージャーにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3958	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

254646	5	警告	アドビシステムズ	-	Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3957	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

254647	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるスクリプトインジェクションの脆弱性に関連した脆弱性	CWE-16 環境設定	CVE-2009-3956	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

254648	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3955	2010-02-10 13:38	2010-01-12	Show	GitHub Exploit DB Packet Storm

254649	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の 3D 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3954	2010-02-10 13:38	2010-01-12	Show	GitHub Exploit DB Packet Storm

254650	6.8	警告	サン・マイクロシステムズ	-	Sun Solaris の Trusted Extensions における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0310	2010-02-10 13:38	2010-01-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312141	7.8	HIGH Local	intel	simics_package_manager	Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-26027	2024-09-7 03:52	2024-08-14	Show	GitHub Exploit DB Packet Storm

312142	5.5	MEDIUM Local	intel	memory_and_storage_tool_gui	Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local access.	CWE-276 Incorrect Default Permissions	CVE-2024-27461	2024-09-7 03:45	2024-08-14	Show	GitHub Exploit DB Packet Storm

312143	7.8	HIGH Local	intel	graphics_performance_analyzers	Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28046	2024-09-7 03:40	2024-08-14	Show	GitHub Exploit DB Packet Storm

312144	5.5	MEDIUM Local	intel	arc_a_graphics iris_xe_graphics	Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-28050	2024-09-7 03:38	2024-08-14	Show	GitHub Exploit DB Packet Storm

312145	7.3	HIGH Local	intel	oneapi_hpc_toolkit trace_analyzer_and_collector	Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28172	2024-09-7 03:36	2024-08-14	Show	GitHub Exploit DB Packet Storm

312146	7.3	HIGH Local	intel	mpi_library oneapi_hpc_toolkit	Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28876	2024-09-7 03:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

312147	9.8	CRITICAL Network	lopalopa	music_management_system	Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter.	CWE-89 SQL Injection	CVE-2024-42783	2024-09-7 03:31	2024-08-22	Show	GitHub Exploit DB Packet Storm

312148	7.2	HIGH Network	ethyca	fides	Fides is an open-source privacy engineering platform. Starting in version 2.19.0 and prior to version 2.44.0, the Email Templating feature uses Jinja2 without proper input sanitization or rendering e…	CWE-94 Code Injection	CVE-2024-45053	2024-09-7 03:20	2024-09-5	Show	GitHub Exploit DB Packet Storm

312149	5.3	MEDIUM Network	ethyca	fides	Fides is an open-source privacy engineering platform. Prior to version 2.44.0, a timing-based username enumeration vulnerability exists in Fides Webserver authentication. This vulnerability allows an…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-45052	2024-09-7 03:18	2024-09-5	Show	GitHub Exploit DB Packet Storm

312150	7.5	HIGH Network	zyxel	nebula_lte3301-plus_firmware nebula_fwa505_firmware nebula_fwa710_firmware nebula_fwa510_firmware wx5600-t0_firmware wx3401-b0_firmware wx3100-t0_firmware scr50axe_firmware px…	A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) condition…	CWE-120 Classic Buffer Overflow	CVE-2024-5412	2024-09-7 03:07	2024-09-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed