Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224391	3.5	注意	IBM	-	IBM Informix Open Admin Tool におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0492	2013-08-13 18:42	2013-08-8	Show	GitHub Exploit DB Packet Storm

224392	7.1	危険	Moxa Inc.	-	複数の Moxa OnCell ゲートウェイ製品のファームウェアにおけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-3039	2013-08-13 18:19	2013-04-3	Show	GitHub Exploit DB Packet Storm

224393	7.5	危険	Cotonti Team	-	Cotonti の modules/rss/rss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4789	2013-08-13 17:27	2013-07-17	Show	GitHub Exploit DB Packet Storm

224394	4.3	警告	Magnolia International	-	Magnolia CMS 用 Magnolia Form モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4759	2013-08-13 17:23	2013-07-17	Show	GitHub Exploit DB Packet Storm

224395	7.5	危険	Netwin Ltd	-	NetWin SurgeFTP におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-4742	2013-08-13 16:59	2013-07-22	Show	GitHub Exploit DB Packet Storm

224396	4.3	警告	Franz Holzinger	-	TYPO3 用 Static Methods since 2007 エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5100	2013-08-13 16:49	2013-01-11	Show	GitHub Exploit DB Packet Storm

224397	4.3	警告	SilverStripe	-	SilverStripe CMS 用 SilverStripe E-Commerce モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6458	2013-08-13 16:41	2012-12-22	Show	GitHub Exploit DB Packet Storm

224398	7.5	危険	The YardRadius Project	-	Yet Another Radius Daemon におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2013-4147	2013-08-13 16:27	2013-07-1	Show	GitHub Exploit DB Packet Storm

224399	6.8	警告	Boris Eyrich Software	-	Artweaver におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-2576	2013-08-13 16:05	2013-07-22	Show	GitHub Exploit DB Packet Storm

224400	9.3	危険	19th Parallel	-	Sagelight における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2013-3480	2013-08-13 15:58	2013-07-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314911	7.8	HIGH Local	intel	graphics_performance_analyzers	Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28046	2024-09-7 03:40	2024-08-14	Show	GitHub Exploit DB Packet Storm

314912	5.5	MEDIUM Local	intel	arc_a_graphics iris_xe_graphics	Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-28050	2024-09-7 03:38	2024-08-14	Show	GitHub Exploit DB Packet Storm

314913	7.3	HIGH Local	intel	oneapi_hpc_toolkit trace_analyzer_and_collector	Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28172	2024-09-7 03:36	2024-08-14	Show	GitHub Exploit DB Packet Storm

314914	7.3	HIGH Local	intel	mpi_library oneapi_hpc_toolkit	Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28876	2024-09-7 03:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

314915	9.8	CRITICAL Network	lopalopa	music_management_system	Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter.	CWE-89 SQL Injection	CVE-2024-42783	2024-09-7 03:31	2024-08-22	Show	GitHub Exploit DB Packet Storm

314916	7.2	HIGH Network	ethyca	fides	Fides is an open-source privacy engineering platform. Starting in version 2.19.0 and prior to version 2.44.0, the Email Templating feature uses Jinja2 without proper input sanitization or rendering e…	CWE-94 Code Injection	CVE-2024-45053	2024-09-7 03:20	2024-09-5	Show	GitHub Exploit DB Packet Storm

314917	5.3	MEDIUM Network	ethyca	fides	Fides is an open-source privacy engineering platform. Prior to version 2.44.0, a timing-based username enumeration vulnerability exists in Fides Webserver authentication. This vulnerability allows an…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-45052	2024-09-7 03:18	2024-09-5	Show	GitHub Exploit DB Packet Storm

314918	7.5	HIGH Network	zyxel	nebula_lte3301-plus_firmware nebula_fwa505_firmware nebula_fwa710_firmware nebula_fwa510_firmware wx5600-t0_firmware wx3401-b0_firmware wx3100-t0_firmware scr50axe_firmware px…	A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) condition…	CWE-120 Classic Buffer Overflow	CVE-2024-5412	2024-09-7 03:07	2024-09-3	Show	GitHub Exploit DB Packet Storm

314919	7.5	HIGH Network	transsion	carlcare	Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.	NVD-CWE-noinfo	CVE-2024-7697	2024-09-7 03:04	2024-08-12	Show	GitHub Exploit DB Packet Storm

314920	8.8	HIGH Local	freebsd	freebsd	The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtio_scsi can exploi…	CWE-909 Missing Initialization of Resource	CVE-2024-8178	2024-09-7 02:35	2024-09-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed