Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223981 7.8 危険 マイクロソフト - Microsoft .NET Framework におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3860 2013-10-22 18:06 2013-10-8 Show GitHub Exploit DB Packet Storm
223982 9.3 危険 マイクロソフト - 複数の Microsoft 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3128 2013-10-22 18:06 2013-10-8 Show GitHub Exploit DB Packet Storm
223983 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの dxgkrnl.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-3888 2013-10-22 18:06 2013-10-8 Show GitHub Exploit DB Packet Storm
223984 7.2 危険 マイクロソフト - Microsoft Windows 7 および Microsoft Server 2008 R2 のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-3881 2013-10-22 18:06 2013-10-8 Show GitHub Exploit DB Packet Storm
223985 6.8 警告 マイクロソフト - Microsoft SharePoint Server におけるクリックジャッキング攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3895 2013-10-22 18:06 2013-10-8 Show GitHub Exploit DB Packet Storm
223986 3.5 注意 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの App Container 機能におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3880 2013-10-22 18:05 2013-10-8 Show GitHub Exploit DB Packet Storm
223987 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-3879 2013-10-22 18:05 2013-10-8 Show GitHub Exploit DB Packet Storm
223988 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの USB ドライバにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3200 2013-10-22 18:05 2013-10-8 Show GitHub Exploit DB Packet Storm
223989 9.3 危険 アップル - Apple iTunes などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1005 2013-10-22 18:04 2013-05-16 Show GitHub Exploit DB Packet Storm
223990 9.3 危険 アップル - Apple iTunes などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1004 2013-10-22 17:56 2013-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313841 8.8 HIGH
Network 		esafenet cdg A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The… CWE-89
SQL Injection 		CVE-2024-10135 2024-10-23 03:09 2024-10-19 Show GitHub Exploit DB Packet Storm
313842 7.2 HIGH
Network 		cisco ata_191_firmware
ata_192_firmware 		A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with high privileges to exe… CWE-78
OS Command  		CVE-2024-20459 2024-10-23 03:06 2024-10-17 Show GitHub Exploit DB Packet Storm
313843 8.2 HIGH
Network 		cisco ata_191_firmware
ata_192_firmware 		A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or … CWE-78
OS Command  		CVE-2024-20458 2024-10-23 03:03 2024-10-17 Show GitHub Exploit DB Packet Storm
313844 7.5 HIGH
Network 		didiglobal ddmq A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input… CWE-863
 Incorrect Authorization 		CVE-2024-10173 2024-10-23 02:05 2024-10-20 Show GitHub Exploit DB Packet Storm
313845 5.4 MEDIUM
Network 		k2-service product_customizer_light The Product Customizer Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization … CWE-79
Cross-site Scripting 		CVE-2024-9848 2024-10-23 01:42 2024-10-18 Show GitHub Exploit DB Packet Storm
313846 7.4 HIGH
Network 		bitdefender total_security A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates. Specifically, if a site certificate … CWE-295
Improper Certificate Validation  		CVE-2023-6055 2024-10-23 01:39 2024-10-18 Show GitHub Exploit DB Packet Storm
313847 6.8 MEDIUM
Network 		bitdefender total_security A vulnerability has been identified in the Bitdefender Total Security HTTPS scanning functionality where the product incorrectly checks the site's certificate, which allows an attacker to make MITM S… CWE-295
Improper Certificate Validation  		CVE-2023-49567 2024-10-23 01:39 2024-10-18 Show GitHub Exploit DB Packet Storm
313848 7.4 HIGH
Network 		bitdefender total_security A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found to trust certificat… CWE-295
Improper Certificate Validation  		CVE-2023-6056 2024-10-23 01:38 2024-10-18 Show GitHub Exploit DB Packet Storm
313849 5.4 MEDIUM
Network 		newsignature wp_easy_post_types The WP Easy Post Types plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.4.4 due to insufficient input sanitization and output escapi… CWE-79
Cross-site Scripting 		CVE-2024-10080 2024-10-23 01:27 2024-10-18 Show GitHub Exploit DB Packet Storm
313850 8.8 HIGH
Network 		newsignature wp_easy_post_types The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-10079 2024-10-23 01:27 2024-10-18 Show GitHub Exploit DB Packet Storm