Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255541	4.3	警告	シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン)	-	APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4406	2010-03-12 15:13	2009-12-23	Show	GitHub Exploit DB Packet Storm

255542	4.3	警告	シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン)	-	APC Network Management Card におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1798	2010-03-12 15:13	2009-12-28	Show	GitHub Exploit DB Packet Storm

255543	6.8	警告	シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン)	-	APC Network Management Card におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-1797	2010-03-12 15:12	2009-12-28	Show	GitHub Exploit DB Packet Storm

255544	6.6	警告	日立	-	JP1/Cm2/Network Node Manager のリモートコンソールにおけるファイルパーミッションの脆弱性	CWE-264 認可・権限・アクセス制御	-	2010-03-12 15:12	2010-02-26	Show	GitHub Exploit DB Packet Storm

255545	9.3	危険	Panda Security	-	Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題	CWE-94 コード・インジェクション	CVE-2009-3735	2010-03-12 15:12	2010-02-12	Show	GitHub Exploit DB Packet Storm

255546	5	警告	サイバートラスト株式会社 OpenSSL Project IBM レッドハット	-	OpenSSL の dtls1_retrieve_buffered_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1379	2010-03-12 14:44	2009-05-19	Show	GitHub Exploit DB Packet Storm

255547	5	警告	サイバートラスト株式会社 OpenSSL Project IBM レッドハット	-	OpenSSL の dtls1_process_out_of_seq_message 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1378	2010-03-12 14:44	2009-05-19	Show	GitHub Exploit DB Packet Storm

255548	5	警告	サイバートラスト株式会社 OpenSSL Project IBM レッドハット	-	OpenSSL の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-1377	2010-03-12 14:43	2009-05-19	Show	GitHub Exploit DB Packet Storm

255549	5	警告	アップルサイバートラスト株式会社 OpenSSL Project Apache Software Foundation レッドハット	-	OpenSSL の zlib_stateful_init 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-1678	2010-03-12 14:43	2008-07-10	Show	GitHub Exploit DB Packet Storm

255550	5.8	警告	OpenPNEプロジェクト	-	OpenPNE におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1040	2010-03-11 12:39	2010-03-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
309061	-		-	-	A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An att…	-	CVE-2024-48459	2024-10-30 05:35	2024-10-26	Show	GitHub Exploit DB Packet Storm

309062	-		-	-	A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inv…	-	CVE-2024-48426	2024-10-30 05:35	2024-10-25	Show	GitHub Exploit DB Packet Storm

309063	-		-	-	Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys	-	CVE-2023-32189	2024-10-30 05:35	2024-10-16	Show	GitHub Exploit DB Packet Storm

309064	4.3	MEDIUM Network	google	chrome	Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via…	NVD-CWE-noinfo	CVE-2024-7978	2024-10-30 05:35	2024-08-22	Show	GitHub Exploit DB Packet Storm

309065	4.3	MEDIUM Network	google	chrome	Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discreti…	NVD-CWE-noinfo	CVE-2024-7004	2024-10-30 05:35	2024-08-7	Show	GitHub Exploit DB Packet Storm

309066	6.5	MEDIUM Network	mozilla	firefox firefox_esr thunderbird	Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, an…	NVD-CWE-noinfo	CVE-2024-7518	2024-10-30 05:35	2024-08-6	Show	GitHub Exploit DB Packet Storm

309067	8.8	HIGH Network	google	chrome	Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security sev…	CWE-125 Out-of-bounds Read	CVE-2024-7255	2024-10-30 05:35	2024-08-2	Show	GitHub Exploit DB Packet Storm

309068	9.8	CRITICAL Network	janobe	online_hotel_reservation_system	A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. T…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-10413	2024-10-30 05:33	2024-10-27	Show	GitHub Exploit DB Packet Storm

309069	7.2	HIGH Network	janobe	online_hotel_reservation_system	A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doChec…	CWE-89 SQL Injection	CVE-2024-10411	2024-10-30 05:28	2024-10-27	Show	GitHub Exploit DB Packet Storm

309070	8.8	HIGH Network	fabianros	blood_bank_management_system	A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of …	CWE-89 SQL Injection	CVE-2024-10415	2024-10-30 05:26	2024-10-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed