Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256131	6.4	警告	ヒューレット・パッカードレッドハット日立オラクル	-	Oracle Sun Products Suite の Oracle Communications Messaging Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3564	2010-12-16 15:22	2010-10-12	Show	GitHub Exploit DB Packet Storm

256132	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2010-3817	2010-12-16 14:18	2010-11-22	Show	GitHub Exploit DB Packet Storm

256133	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3816	2010-12-16 14:18	2010-11-22	Show	GitHub Exploit DB Packet Storm

256134	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3811	2010-12-16 14:16	2010-11-22	Show	GitHub Exploit DB Packet Storm

256135	5	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP のセッションシリアライザにおける任意のセッション変数に変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3065	2010-12-15 15:28	2010-05-31	Show	GitHub Exploit DB Packet Storm

256136	5	警告	日立	-	JP1/NETM 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-12-15 15:27	2010-07-30	Show	GitHub Exploit DB Packet Storm

256137	5	警告	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1917	2010-12-15 15:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

256138	5	警告	The PHP Group アップルターボリナックスサイバートラスト株式会社レッドハット	-	PHP の xmlrpc 拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0397	2010-12-15 15:27	2010-03-16	Show	GitHub Exploit DB Packet Storm

256139	6.4	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP の Linear Congruential Generator における値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-1128	2010-12-15 15:26	2010-03-26	Show	GitHub Exploit DB Packet Storm

256140	6.9	警告	GNU Project 日本電気ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Libtool の libltdl における権限昇格の脆弱性	CWE-DesignError	CVE-2009-3736	2010-12-15 15:26	2009-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318301	9.8	CRITICAL Network	learningdigital	orca_hcm	Orca HCM from LEARNING DIGITAL does not properly restrict access to a specific functionality, allowing unauthenticated remote attacker to exploit this functionality to create an account with administ…	NVD-CWE-Other	CVE-2024-8584	2024-09-13 19:15	2024-09-9	Show	GitHub Exploit DB Packet Storm

318302	5.5	MEDIUM Local	-	-	Illustrator versions 28.6, 27.9.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to b…	CWE-125 Out-of-bounds Read	CVE-2024-45111	2024-09-13 18:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

318303	5.5	MEDIUM Local	-	-	Illustrator versions 28.6, 27.9.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulner…	CWE-476 NULL Pointer Dereference	CVE-2024-43759	2024-09-13 18:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

318304	7.8	HIGH Local	-	-	Illustrator versions 28.6, 27.9.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss…	CWE-416 Use After Free	CVE-2024-43758	2024-09-13 18:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

318305	7.8	HIGH Local	-	-	After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …	CWE-787 Out-of-bounds Write	CVE-2024-41859	2024-09-13 18:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

318306	5.5	MEDIUM Local	-	-	After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…	CWE-125 Out-of-bounds Read	CVE-2024-39382	2024-09-13 18:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

318307	7.8	HIGH Local	-	-	After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …	-	CVE-2024-39381	2024-09-13 18:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

318308	-		-	-	After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati…	CWE-122 Heap-based Buffer Overflow	CVE-2024-39380	2024-09-13 18:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

318309	7.8	HIGH Local	adobe	illustrator	Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user…	NVD-CWE-noinfo	CVE-2024-41856	2024-09-13 18:15	2024-08-15	Show	GitHub Exploit DB Packet Storm

318310	5.4	MEDIUM Network	3ds	3dexperience	A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.	CWE-79 Cross-site Scripting	CVE-2024-7939	2024-09-13 16:15	2024-09-2	Show	GitHub Exploit DB Packet Storm