Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224521 4.3 警告 オラクル - Oracle Sun Solaris における Kernel に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3787 2013-07-18 15:46 2013-07-16 Show GitHub Exploit DB Packet Storm
224522 4.7 警告 オラクル - Oracle Sun Solaris における Filesystem/DevFS に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3797 2013-07-18 15:46 2013-07-16 Show GitHub Exploit DB Packet Storm
224523 4.9 警告 オラクル - Oracle Sun Solaris における Kernel に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3799 2013-07-18 15:46 2013-07-16 Show GitHub Exploit DB Packet Storm
224524 5.8 警告 オラクル - Oracle Sun Solaris における Libraries/PAM-Unix に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3813 2013-07-18 15:46 2013-07-16 Show GitHub Exploit DB Packet Storm
224525 7.5 危険 オラクル - Oracle Virtualization の Secure Global Desktop における Web UI に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3779 2013-07-18 15:46 2013-07-16 Show GitHub Exploit DB Packet Storm
224526 4.3 警告 オラクル - Oracle Virtualization の Secure Global Desktop における Web UI に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3782 2013-07-18 15:46 2013-07-16 Show GitHub Exploit DB Packet Storm
224527 4.3 警告 オラクル - Oracle Enterprise Manager Grid Control の複数の製品における Schema Management に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3758 2013-07-18 14:19 2013-07-16 Show GitHub Exploit DB Packet Storm
224528 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Access Manager における SSO Engine に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3755 2013-07-18 14:19 2013-07-16 Show GitHub Exploit DB Packet Storm
224529 5.5 警告 オラクル - Oracle Fusion Middleware の Oracle Endeca Server における脆弱性 CWE-noinfo
情報不足
CVE-2013-3763 2013-07-18 14:19 2013-07-16 Show GitHub Exploit DB Packet Storm
224530 5.5 警告 オラクル - Oracle Fusion Middleware の Oracle Endeca Server における脆弱性 CWE-noinfo
情報不足
CVE-2013-3764 2013-07-18 14:19 2013-07-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314361 - - - Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authenticatio… CWE-524
 Use of Cache Containing Sensitive Information
CVE-2024-45596 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
314362 - - - cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component. - CVE-2024-34831 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
314363 6.5 MEDIUM
Network
mozilla thunderbird When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2. CWE-416
 Use After Free
CVE-2024-8394 2024-09-12 01:25 2024-09-7 Show GitHub Exploit DB Packet Storm
314364 8.8 HIGH
Network
draytek vigor3900_firmware DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string function. CWE-78
OS Command 
CVE-2024-44845 2024-09-12 01:24 2024-09-7 Show GitHub Exploit DB Packet Storm
314365 8.8 HIGH
Network
draytek vigor3900_firmware DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function. CWE-78
OS Command 
CVE-2024-44844 2024-09-12 01:24 2024-09-7 Show GitHub Exploit DB Packet Storm
314366 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmi_get_variable We can get EFI variables without fetching the attribute, so we must allow for that in g… CWE-476
 NULL Pointer Dereference
CVE-2023-52893 2024-09-12 01:24 2024-08-21 Show GitHub Exploit DB Packet Storm
314367 4.3 MEDIUM
Network
ngothang wp_multitasking The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error
CVE-2024-6852 2024-09-12 01:23 2024-09-8 Show GitHub Exploit DB Packet Storm
314368 4.3 MEDIUM
Network
ngothang wp_multitasking The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack CWE-352
 Origin Validation Error
CVE-2024-6853 2024-09-12 01:22 2024-09-8 Show GitHub Exploit DB Packet Storm
314369 4.7 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to race GEM object creation with handle clos… CWE-416
 Use After Free
CVE-2022-48899 2024-09-12 01:22 2024-08-21 Show GitHub Exploit DB Packet Storm
314370 4.3 MEDIUM
Network
ngothang wp_multitasking The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack CWE-352
 Origin Validation Error
CVE-2024-6855 2024-09-12 01:21 2024-09-8 Show GitHub Exploit DB Packet Storm