Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254801	9.3	危険	アップル	-	Apple Safari の WebKit 内にある JavaScript 実装における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3805	2010-12-15 14:32	2010-11-22	Show	GitHub Exploit DB Packet Storm

254802	5	警告	アップル	-	Apple Safari の WebKit 内にある JavaScript 実装におけるユーザを追跡可能な脆弱性	CWE-310 暗号の問題	CVE-2010-3804	2010-12-15 14:29	2010-11-22	Show	GitHub Exploit DB Packet Storm

254803	9.3	危険	アップル	-	Apple Safari の WebKit における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3803	2010-12-15 14:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

254804	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3348	2010-12-15 14:08	2010-12-15	Show	GitHub Exploit DB Packet Storm

254805	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:07	2010-12-15	Show	GitHub Exploit DB Packet Storm

254806	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:05	2010-12-15	Show	GitHub Exploit DB Packet Storm

254807	4.3	警告	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:03	2010-12-15	Show	GitHub Exploit DB Packet Storm

254808	7.5	危険	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Samba の chain_reply 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2063	2010-12-15 12:51	2010-06-16	Show	GitHub Exploit DB Packet Storm

254809	7.5	危険	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache HTTP Server の mod_proxy_ftp モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3095	2010-12-15 12:45	2009-09-8	Show	GitHub Exploit DB Packet Storm

254810	5.4	警告	IBM Apache Software Foundation 富士通サイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache HTTP Server の ap_proxy_ftp_handler 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-3094	2010-12-15 12:44	2009-09-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311001	7.8	HIGH Local	deltaww	cncsoft-g2	Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page…	CWE-787 Out-of-bounds Write	CVE-2024-47963	2024-10-17 23:37	2024-10-11	Show	GitHub Exploit DB Packet Storm

311002	7.8	HIGH Local	deltaww	cncsoft-g2	Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a mal…	CWE-787 Out-of-bounds Write	CVE-2024-47962	2024-10-17 23:37	2024-10-11	Show	GitHub Exploit DB Packet Storm

311003	7.8	HIGH Local	deltaww	cncsoft-g2	Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute …	CWE-908 Use of Uninitialized Resource	CVE-2024-47966	2024-10-17 23:36	2024-10-11	Show	GitHub Exploit DB Packet Storm

311004	7.8	HIGH Local	deltaww	cncsoft-g2	Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page …	CWE-125 Out-of-bounds Read	CVE-2024-47965	2024-10-17 23:36	2024-10-11	Show	GitHub Exploit DB Packet Storm

311005	6.1	MEDIUM Network	rems	profile_registration_without_reload\/refresh	A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file …	CWE-79 Cross-site Scripting	CVE-2024-9799	2024-10-17 23:32	2024-10-11	Show	GitHub Exploit DB Packet Storm

311006	4.3	MEDIUM Adjacent	dell	emc_appsync	Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to in…	CWE-611 XXE	CVE-2024-39586	2024-10-17 23:30	2024-10-9	Show	GitHub Exploit DB Packet Storm

311007	7.2	HIGH Network	lylme	lylme_spage	A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id leads to sql inject…	CWE-89 SQL Injection	CVE-2024-9790	2024-10-17 23:26	2024-10-11	Show	GitHub Exploit DB Packet Storm

311008	7.2	HIGH Network	lylme	lylme_spage	A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument id leads to sql in…	CWE-89 SQL Injection	CVE-2024-9789	2024-10-17 23:26	2024-10-10	Show	GitHub Exploit DB Packet Storm

311009	7.2	HIGH Network	lylme	lylme_spage	A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql in…	CWE-89 SQL Injection	CVE-2024-9788	2024-10-17 23:26	2024-10-10	Show	GitHub Exploit DB Packet Storm

311010	5.4	MEDIUM Network	openwebui	open_webui	In version v0.3.8 of open-webui/open-webui, a vulnerability exists where a token is returned when a user with a pending role logs in. This allows the user to perform actions without admin confirmatio…	NVD-CWE-Other	CVE-2024-7049	2024-10-17 23:22	2024-10-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed