Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224451 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1718 2013-10-15 16:53 2013-09-17 Show GitHub Exploit DB Packet Storm
224452 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の cryptojs_interpret_key_gen_type 関数におけるヒープベースのバッファアンダーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1705 2013-10-15 16:50 2013-08-6 Show GitHub Exploit DB Packet Storm
224453 7.5 危険 Fast Permissions Administration - Drupal 用 Fast Permissions Administration モジュールにおける不特定のアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2247 2013-10-15 16:39 2013-06-26 Show GitHub Exploit DB Packet Storm
224454 5.8 警告 Node access user reference - Drupal 用 Node access user reference モジュールにおけるコンテンツを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2123 2013-10-15 16:37 2013-05-29 Show GitHub Exploit DB Packet Storm
224455 7.8 危険 アップル - Apple iOS のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5140 2013-10-15 15:10 2013-09-18 Show GitHub Exploit DB Packet Storm
224456 6 警告 シスコシステムズ - Cisco 9900 Unified IP phones の image-upgrade 機能における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5533 2013-10-15 13:50 2013-10-11 Show GitHub Exploit DB Packet Storm
224457 5 警告 シスコシステムズ - Cisco 9900 IP phones の Web アプリケーションインターフェースにおけるバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5532 2013-10-15 13:46 2013-10-11 Show GitHub Exploit DB Packet Storm
224458 4 警告 シスコシステムズ - Cisco Unified Communications Manager の Tomcat 管理 Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-5528 2013-10-15 13:42 2013-10-11 Show GitHub Exploit DB Packet Storm
224459 6.8 警告 アップル - Apple iTunes などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1011 2013-10-11 20:08 2013-05-16 Show GitHub Exploit DB Packet Storm
224460 6.8 警告 アドビシステムズ - Windows 上で稼働する Adobe Reader および Acrobat における javascript: URL 内の任意の JavaScript コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-5325 2013-10-11 19:34 2013-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313291 5.4 MEDIUM
Network 		poco-z guns-medial A vulnerability was found in Poco-z Guns-Medical 1.0. It has been declared as problematic. Affected by this vulnerability is the function upload of the file /mgr/upload of the component File Upload. … CWE-79
Cross-site Scripting 		CVE-2024-10412 2024-10-30 05:40 2024-10-27 Show GitHub Exploit DB Packet Storm
313292 - - - An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file. - CVE-2024-48655 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
313293 - - - A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An att… - CVE-2024-48459 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
313294 - - - A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inv… - CVE-2024-48426 2024-10-30 05:35 2024-10-25 Show GitHub Exploit DB Packet Storm
313295 - - - Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys - CVE-2023-32189 2024-10-30 05:35 2024-10-16 Show GitHub Exploit DB Packet Storm
313296 4.3 MEDIUM
Network 		google chrome Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via… NVD-CWE-noinfo
CVE-2024-7978 2024-10-30 05:35 2024-08-22 Show GitHub Exploit DB Packet Storm
313297 4.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discreti… NVD-CWE-noinfo
CVE-2024-7004 2024-10-30 05:35 2024-08-7 Show GitHub Exploit DB Packet Storm
313298 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, an… NVD-CWE-noinfo
CVE-2024-7518 2024-10-30 05:35 2024-08-6 Show GitHub Exploit DB Packet Storm
313299 8.8 HIGH
Network 		google chrome Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security sev… CWE-125
Out-of-bounds Read 		CVE-2024-7255 2024-10-30 05:35 2024-08-2 Show GitHub Exploit DB Packet Storm
313300 9.8 CRITICAL
Network 		janobe online_hotel_reservation_system A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. T… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-10413 2024-10-30 05:33 2024-10-27 Show GitHub Exploit DB Packet Storm