Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255001	4.3	警告	シスコシステムズ	-	Cisco Secure Desktop の +CSCOT+/translation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0440	2010-02-24 12:27	2010-02-1	Show	GitHub Exploit DB Packet Storm

255002	6.2	警告	ヒューレット・パッカード	-	HP ECMT におけるデータベースにアクセスされる脆弱性	CWE-noinfo 情報不足	CVE-2009-4184	2010-02-24 12:27	2009-10-5	Show	GitHub Exploit DB Packet Storm

255003	4.6	警告	アップル	-	Apple iPhone OS のリカバリモードにおける任意のデータを読まれる脆弱性	CWE-399 リソース管理の問題	CVE-2010-0038	2010-02-24 12:26	2010-02-2	Show	GitHub Exploit DB Packet Storm

255004	5	警告	サン・マイクロシステムズ VMware	-	Sun Java SE におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3885	2010-02-24 12:26	2009-11-9	Show	GitHub Exploit DB Packet Storm

255005	7.5	危険	サン・マイクロシステムズ VMware	-	JDK および JRE の Java Update 機能における古いバージョンの脆弱性を利用される脆弱性	CWE-Other その他	CVE-2009-3864	2010-02-24 12:26	2009-11-3	Show	GitHub Exploit DB Packet Storm

255006	5	警告	アドビシステムズ	-	Adobe ColdFusion のデフォルト設定におけるコレクションのメタデータを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0185	2010-02-24 12:25	2010-01-29	Show	GitHub Exploit DB Packet Storm

255007	6.8	警告	Apache Software Foundation	-	Apache HTTP Server の ap_proxy_send_fb 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0010	2010-02-24 12:25	2010-02-2	Show	GitHub Exploit DB Packet Storm

255008	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	JDK、JRE および SDK におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3877	2010-02-24 12:25	2009-11-5	Show	GitHub Exploit DB Packet Storm

255009	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	JDK、JRE および SDK におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3876	2010-02-24 12:24	2009-11-5	Show	GitHub Exploit DB Packet Storm

255010	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	JDK、JRE および SDK の MessageDigest.isEqual 関数における HMAC ベースのデジタル署名の偽装および認証回避の脆弱性	CWE-310 暗号の問題	CVE-2009-3875	2010-02-24 12:24	2009-11-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
309421	7.8	HIGH Local	google	android	In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileg…	CWE-787 Out-of-bounds Write	CVE-2024-44095	2024-10-15 23:35	2024-09-14	Show	GitHub Exploit DB Packet Storm

309422	9.8	CRITICAL Network	tenda	ch22_firmware	Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.	CWE-787 Out-of-bounds Write	CVE-2024-46045	2024-10-15 23:35	2024-09-13	Show	GitHub Exploit DB Packet Storm

309423	7.8	HIGH Local	philiphazel	xfpt	xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is trick…	CWE-787 Out-of-bounds Write	CVE-2024-43700	2024-10-15 23:35	2024-08-29	Show	GitHub Exploit DB Packet Storm

309424	8.8	HIGH Network	google	chrome	Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page…	CWE-787 Out-of-bounds Write	CVE-2024-8198	2024-10-15 23:35	2024-08-29	Show	GitHub Exploit DB Packet Storm

309425	8.8	HIGH Network	google	chrome	Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)	CWE-787 Out-of-bounds Write	CVE-2024-7534	2024-10-15 23:35	2024-08-7	Show	GitHub Exploit DB Packet Storm

309426	5.4	MEDIUM Network	wpuserplus	userplus	The UserPlus plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.…	CWE-862 Missing Authorization	CVE-2024-9520	2024-10-15 23:34	2024-10-10	Show	GitHub Exploit DB Packet Storm

309427	5.4	MEDIUM Network	esri	portal_for_arcgis	There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arb…	CWE-79 Cross-site Scripting	CVE-2024-38039	2024-10-15 23:34	2024-10-5	Show	GitHub Exploit DB Packet Storm

309428	6.1	MEDIUM Network	esri	portal_for_arcgis	There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and 10.9.1 that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary …	CWE-601 Open Redirect	CVE-2024-38037	2024-10-15 23:34	2024-10-5	Show	GitHub Exploit DB Packet Storm

309429	5.4	MEDIUM Network	esri	portal_for_arcgis	There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated attacker to create a crafted link which when clicked coul…	CWE-79 Cross-site Scripting	CVE-2024-38036	2024-10-15 23:34	2024-10-5	Show	GitHub Exploit DB Packet Storm

309430	4.8	MEDIUM Network	esri	portal_for_arcgis	There is a reflected cross site scripting in Esri Portal for ArcGIS 11.1 and below on Windows and Linux x64 allows a remote authenticated attacker with administrative access to supply a crafted strin…	CWE-79 Cross-site Scripting	CVE-2024-25707	2024-10-15 23:34	2024-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed