Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224841	7.5	危険	Joachim Ruhs	-	TYPO3 用 Store Locator エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5304	2013-08-20 14:08	2013-08-5	Show	GitHub Exploit DB Packet Storm

224842	10	危険	Joachim Ruhs	-	TYPO3 用 Store Locator エクステンションにおける脆弱性	CWE-noinfo 情報不足	CVE-2013-5303	2013-08-20 13:54	2013-08-5	Show	GitHub Exploit DB Packet Storm

224843	7.5	危険	Kennziffer.com	-	TYPO3 用 Faceted Search エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5302	2013-08-20 13:46	2013-08-5	Show	GitHub Exploit DB Packet Storm

224844	7.8	危険	TrustPort	-	Trustport Webfilter の help.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-5301	2013-08-20 13:39	2013-07-30	Show	GitHub Exploit DB Packet Storm

224845	3.5	注意	サイボウズ	-	サイボウズメールワイズにおける情報漏えいの脆弱性	CWE-noinfo 情報不足	CVE-2013-4698	2013-08-20 11:36	2013-08-13	Show	GitHub Exploit DB Packet Storm

224846	4.3	警告	WordPress.org	-	WordPress の SWFUpload のデフォルト設定における同一生成元ポリシーを回避される脆弱性	CWE-16 CWE-79	CVE-2013-2205	2013-08-19 18:03	2013-06-21	Show	GitHub Exploit DB Packet Storm

224847	4.3	警告	Moxiecode Systems AB WordPress.org	-	WordPress の TinyMCE Media プラグインで使用される Moxiecode moxieplayer における Flash アプリケーションに任意のパラメータを渡される脆弱性	CWE-20 不適切な入力確認	CVE-2013-2204	2013-08-19 18:02	2013-06-21	Show	GitHub Exploit DB Packet Storm

224848	4.3	警告	WordPress.org	-	WordPress における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-2203	2013-08-19 18:02	2013-06-21	Show	GitHub Exploit DB Packet Storm

224849	4.3	警告	WordPress.org	-	WordPress における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-2202	2013-08-19 18:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

224850	4.3	警告	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2201	2013-08-19 17:59	2013-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
316371	5.5	MEDIUM Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1380_firmware exynos_1330_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In th…	CWE-125 Out-of-bounds Read	CVE-2024-27366	2024-09-12 00:26	2024-09-10	Show	GitHub Exploit DB Packet Storm

316372	7.8	HIGH Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1330_firmware exynos_1380_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_get_scan_extra_ies(), there is no input validation check on…	CWE-787 Out-of-bounds Write	CVE-2024-27383	2024-09-12 00:25	2024-09-10	Show	GitHub Exploit DB Packet Storm

316373	5.5	MEDIUM Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1380_firmware exynos_1330_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, E…	CWE-125 Out-of-bounds Read	CVE-2024-27368	2024-09-12 00:25	2024-09-10	Show	GitHub Exploit DB Packet Storm

316374	7.8	HIGH Local	samsung	exynos_1080_firmware exynos_1280_firmware exynos_1330_firmware exynos_1380_firmware exynos_1480_firmware exynos_850_firmware exynos_980_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_rx_range_done_ind(), there is no input validation check on …	CWE-787 Out-of-bounds Write	CVE-2024-27387	2024-09-12 00:23	2024-09-10	Show	GitHub Exploit DB Packet Storm

316375	-		-	-	Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" in…	-	CVE-2024-37728	2024-09-12 00:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

316376	4.4	MEDIUM Local	avaya	aura_system_manager	An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the sys…	NVD-CWE-noinfo	CVE-2024-7480	2024-09-12 00:03	2024-08-9	Show	GitHub Exploit DB Packet Storm

316377	6.7	MEDIUM Local	avaya	aura_system_manager	A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager databas…	CWE-89 SQL Injection	CVE-2024-7477	2024-09-12 00:03	2024-08-9	Show	GitHub Exploit DB Packet Storm

316378	8.8	HIGH Network	e-bmsoft	bmplanning	SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_IDF, PLANF_IDF, CLI_IDF, DOS_IDF, and possibly other parame…	CWE-89 SQL Injection	CVE-2024-28298	2024-09-11 23:54	2024-08-3	Show	GitHub Exploit DB Packet Storm

316379	9.6	CRITICAL Network	monkeytype	monkeytype	Monkeytype is a minimalistic and customizable typing test. Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its ci-failure-comment.yml GitHub Workflow, enabling attac…	CWE-94 Code Injection	CVE-2024-41127	2024-09-11 23:52	2024-08-3	Show	GitHub Exploit DB Packet Storm

316380	8.8	HIGH Network	dlink	di-8100_firmware	A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd …	CWE-77 Command Injection	CVE-2024-7436	2024-09-11 23:41	2024-08-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed