Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256121	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Swing 実装における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3882	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256122	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK における権限を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3881	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256123	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Abstract Window Toolkit (AWT) における情報漏えいの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3880	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256124	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の X11 および Win32GraphicsDevice サブシステムにおける getConfigurations 関数による配列の複製に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3879	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256125	5	警告	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の TrueType フォント解析機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3729	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256126	5	警告	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の Java Runtime Environment (JRE) におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3728	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256127	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0248	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

256128	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0244	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

256129	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0027	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

256130	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0247	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310751	4.3	MEDIUM Adjacent	gotenna	gotenna_pro	The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advised to share the encryption key via local QR for higher secu…	NVD-CWE-noinfo	CVE-2024-47128	2024-10-18 03:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

310752	3.1	LOW Adjacent	gotenna	gotenna_pro	In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This …	CWE-287 Improper Authentication	CVE-2024-47127	2024-10-18 03:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

310753	8.8	HIGH Adjacent	gotenna	gotenna_pro	The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it easier for attackers to brute force this password if the …	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2024-47126	2024-10-18 03:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

310754	5.4	MEDIUM Adjacent	gotenna	gotenna_pro	The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryptio…	CWE-287 Improper Authentication	CVE-2024-47125	2024-10-18 03:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

310755	6.5	MEDIUM Adjacent	gotenna	gotenna_pro	The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using this and previous versions of the app and update your app to t…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2024-47124	2024-10-18 03:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

310756	6.5	MEDIUM Adjacent	gotenna	gotenna_pro	In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows for complete decryption of keys stored on the EUD if physically compromised. …	CWE-922 Insecure Storage of Sensitive Information	CVE-2024-47122	2024-10-18 03:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

310757	4.3	MEDIUM Adjacent	gotenna	gotenna	The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates every 60 seconds once the plugin is active and goTenna is connected. Users th…	NVD-CWE-Other	CVE-2024-43814	2024-10-18 03:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

310758	5.4	MEDIUM Network	cacti	cacti	Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized when saving external links in `links.php` . Morever, the said fileurl is placed i…	CWE-79 Cross-site Scripting	CVE-2024-43362	2024-10-18 03:14	2024-10-8	Show	GitHub Exploit DB Packet Storm

310759	9.8	CRITICAL Network	oretnom23	online_veterinary_appointment_system	A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/manage_category.php. Th…	CWE-89 SQL Injection	CVE-2024-9818	2024-10-18 03:13	2024-10-11	Show	GitHub Exploit DB Packet Storm

310760	8.8	HIGH Network	blood_bank_system_project	blood_bank_system	A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical. This affects an unknown part of the file /update.php. The manipulation of the argument name leads…	CWE-89 SQL Injection	CVE-2024-9817	2024-10-18 03:12	2024-10-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed