Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224491	4	警告	Apache Software Foundation	-	Apache Subversion の mod_dav_svn Apache HTTPD サーバモジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-4131	2013-08-2 15:41	2013-07-25	Show	GitHub Exploit DB Packet Storm

224492	10	危険	Eva LibRary	-	Ultra Mini HTTPD におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-5019	2013-08-2 15:26	2013-07-11	Show	GitHub Exploit DB Packet Storm

224493	4.3	警告	シマンテック	-	Symantec Encryption Management Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4674	2013-08-2 15:20	2013-07-22	Show	GitHub Exploit DB Packet Storm

224494	4	警告	Fedora Project レッドハット	-	Red Hat Directory Server および 389 Directory Server における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2219	2013-08-2 15:14	2013-07-30	Show	GitHub Exploit DB Packet Storm

224495	4.3	警告	Beanbag	-	Review Board の htdocs/media/rb/js/reviews.js におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2209	2013-08-2 15:06	2013-06-22	Show	GitHub Exploit DB Packet Storm

224496	6	警告	The Foreman レッドハット	-	Foreman の Bookmarks コントローラの create メソッドにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-2121	2013-08-2 14:11	2013-06-7	Show	GitHub Exploit DB Packet Storm

224497	6	警告	The Foreman レッドハット	-	Foreman の app/controllers/users_controller.rb の create メソッドにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2113	2013-08-2 14:06	2013-06-7	Show	GitHub Exploit DB Packet Storm

224498	7.1	危険	Novell CollabNet, Inc. Apache Software Foundation	-	Apache Subversion における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-2088	2013-08-1 18:01	2013-07-4	Show	GitHub Exploit DB Packet Storm

224499	4.3	警告	Western Digital Corporation	-	複数の Western Digital My Net ルータ製品のファームウェアにおける平文の管理パスワードを破られる脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-5006	2013-08-1 17:36	2013-07-18	Show	GitHub Exploit DB Packet Storm

224500	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-2886	2013-08-1 16:33	2013-07-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314591	5.5	MEDIUM Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1380_firmware exynos_1330_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In th…	CWE-125 Out-of-bounds Read	CVE-2024-27366	2024-09-12 00:26	2024-09-10	Show	GitHub Exploit DB Packet Storm

314592	7.8	HIGH Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1330_firmware exynos_1380_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_get_scan_extra_ies(), there is no input validation check on…	CWE-787 Out-of-bounds Write	CVE-2024-27383	2024-09-12 00:25	2024-09-10	Show	GitHub Exploit DB Packet Storm

314593	5.5	MEDIUM Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1380_firmware exynos_1330_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, E…	CWE-125 Out-of-bounds Read	CVE-2024-27368	2024-09-12 00:25	2024-09-10	Show	GitHub Exploit DB Packet Storm

314594	7.8	HIGH Local	samsung	exynos_1080_firmware exynos_1280_firmware exynos_1330_firmware exynos_1380_firmware exynos_1480_firmware exynos_850_firmware exynos_980_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_rx_range_done_ind(), there is no input validation check on …	CWE-787 Out-of-bounds Write	CVE-2024-27387	2024-09-12 00:23	2024-09-10	Show	GitHub Exploit DB Packet Storm

314595	-		-	-	Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" in…	-	CVE-2024-37728	2024-09-12 00:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

314596	4.4	MEDIUM Local	avaya	aura_system_manager	An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the sys…	NVD-CWE-noinfo	CVE-2024-7480	2024-09-12 00:03	2024-08-9	Show	GitHub Exploit DB Packet Storm

314597	6.7	MEDIUM Local	avaya	aura_system_manager	A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager databas…	CWE-89 SQL Injection	CVE-2024-7477	2024-09-12 00:03	2024-08-9	Show	GitHub Exploit DB Packet Storm

314598	8.8	HIGH Network	e-bmsoft	bmplanning	SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_IDF, PLANF_IDF, CLI_IDF, DOS_IDF, and possibly other parame…	CWE-89 SQL Injection	CVE-2024-28298	2024-09-11 23:54	2024-08-3	Show	GitHub Exploit DB Packet Storm

314599	9.6	CRITICAL Network	monkeytype	monkeytype	Monkeytype is a minimalistic and customizable typing test. Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its ci-failure-comment.yml GitHub Workflow, enabling attac…	CWE-94 Code Injection	CVE-2024-41127	2024-09-11 23:52	2024-08-3	Show	GitHub Exploit DB Packet Storm

314600	8.8	HIGH Network	dlink	di-8100_firmware	A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd …	CWE-77 Command Injection	CVE-2024-7436	2024-09-11 23:41	2024-08-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed