Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255891	6.8	警告	Schezo	-	Lhaplus における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3158	2010-10-28 16:55	2010-10-15	Show	GitHub Exploit DB Packet Storm

255892	7.6	危険	マイクロソフト	-	複数の Microsoft 製品の Comctl32.dll におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2746	2010-10-28 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

255893	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3240	2010-10-28 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

255894	9.3	危険	マイクロソフト	-	Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3238	2010-10-28 16:34	2010-10-12	Show	GitHub Exploit DB Packet Storm

255895	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3236	2010-10-28 16:34	2010-10-12	Show	GitHub Exploit DB Packet Storm

255896	9.3	危険	マイクロソフト	-	Microsoft Excel における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3233	2010-10-28 16:34	2010-10-12	Show	GitHub Exploit DB Packet Storm

255897	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3232	2010-10-28 16:33	2010-10-12	Show	GitHub Exploit DB Packet Storm

255898	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3242	2010-10-28 16:33	2010-10-12	Show	GitHub Exploit DB Packet Storm

255899	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3241	2010-10-28 16:33	2010-10-12	Show	GitHub Exploit DB Packet Storm

255900	9.3	危険	マイクロソフト	-	Microsoft Excel における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3239	2010-10-28 16:32	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315371	7.3	HIGH Local	cisco	meraki_systems_manager	A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to execute arbitrary code with elevated privileges.  This vulnerability is …	CWE-427 Uncontrolled Search Path Element	CVE-2024-20430	2024-09-19 03:56	2024-09-13	Show	GitHub Exploit DB Packet Storm

315372	8.8	HIGH Network	owasp	defectdojo	An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component.	NVD-CWE-Other	CVE-2023-48171	2024-09-19 03:54	2024-08-13	Show	GitHub Exploit DB Packet Storm

315373	7.5	HIGH Network	i-doit	i-doit	SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cm…	CWE-89 SQL Injection	CVE-2024-8749	2024-09-19 03:53	2024-09-12	Show	GitHub Exploit DB Packet Storm

315374	8.8	HIGH Network	sir	gnuboard	Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.	CWE-346 Origin Validation Error	CVE-2024-41475	2024-09-19 03:51	2024-08-13	Show	GitHub Exploit DB Packet Storm

315375	9.8	CRITICAL Network	soplanning	soplanning	An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulne…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-27113	2024-09-19 03:43	2024-09-11	Show	GitHub Exploit DB Packet Storm

315376	9.8	CRITICAL Network	soplanning	soplanning	A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying d…	CWE-89 SQL Injection	CVE-2024-27112	2024-09-19 03:42	2024-09-11	Show	GitHub Exploit DB Packet Storm

315377	9.8	CRITICAL Network	agpt	autogpt	A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific com…	CWE-78 OS Command	CVE-2024-6091	2024-09-19 03:41	2024-09-11	Show	GitHub Exploit DB Packet Storm

315378	9.8	CRITICAL Network	reedos	aim-star	This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulner…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2024-45790	2024-09-19 03:38	2024-09-11	Show	GitHub Exploit DB Packet Storm

315379	7.5	HIGH Network	pxlrbt	filament_excel	Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the …	CWE-22 Path Traversal	CVE-2024-42485	2024-09-19 03:31	2024-08-13	Show	GitHub Exploit DB Packet Storm

315380	6.5	MEDIUM Adjacent	zyxel	gs1900-48hpv2_firmware gs1900-48_firmware gs1900-24hpv2_firmware gs1900-24ep_firmware gs1900-24e_firmware gs1900-24_firmware gs1900-16_firmware gs1900-10hp_firmware gs1900-8hp…	An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2…	CWE-331 Insufficient Entropy	CVE-2024-38270	2024-09-19 03:23	2024-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed