Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224911	8.5	危険	IBM	-	IBM Domino の Java コンソールにおける一時的な資格をハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2013-0487	2013-03-28 15:23	2013-03-21	Show	GitHub Exploit DB Packet Storm

224912	1.5	注意	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0525	2013-03-28 15:17	2013-03-21	Show	GitHub Exploit DB Packet Storm

224913	4.3	警告	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5943	2013-03-28 14:27	2013-03-21	Show	GitHub Exploit DB Packet Storm

224914	5	警告	IBM	-	Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0486	2013-03-28 12:00	2013-03-28	Show	GitHub Exploit DB Packet Storm

224915	5	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3558	2013-03-27 17:37	2011-10-18	Show	GitHub Exploit DB Packet Storm

224916	4.3	警告	ヒューレット・パッカードアドビシステムズ日立	-	Adobe Flex SDK におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2461	2013-03-27 17:33	2011-11-30	Show	GitHub Exploit DB Packet Storm

224917	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2460	2013-03-27 17:32	2011-11-10	Show	GitHub Exploit DB Packet Storm

224918	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2459	2013-03-27 17:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

224919	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるクロスドメインポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2458	2013-03-27 17:29	2011-11-10	Show	GitHub Exploit DB Packet Storm

224920	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2457	2013-03-27 17:27	2011-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314711	5.9	MEDIUM Network	ibm	sterling_connect_direct_web_services	IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.…	CWE-311 Missing Encryption of Sensitive Data	CVE-2024-39746	2024-08-24 00:25	2024-08-22	Show	GitHub Exploit DB Packet Storm

314712	7.5	HIGH Network	ibm	sterling_connect_direct_web_services	IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2024-39745	2024-08-24 00:25	2024-08-22	Show	GitHub Exploit DB Packet Storm

314713	4.3	MEDIUM Network	ibm	sterling_connect_direct_web_services	IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted fro…	CWE-352 Origin Validation Error	CVE-2024-39744	2024-08-24 00:25	2024-08-22	Show	GitHub Exploit DB Packet Storm

314714	5.3	MEDIUM Network	youdiancms	youdiancms	A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to informati…	NVD-CWE-noinfo	CVE-2024-7328	2024-08-24 00:25	2024-08-1	Show	GitHub Exploit DB Packet Storm

314715	5.4	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due…	CWE-79 Cross-site Scripting	CVE-2024-20443	2024-08-24 00:18	2024-08-8	Show	GitHub Exploit DB Packet Storm

314716	4.8	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due…	CWE-79 Cross-site Scripting	CVE-2024-20479	2024-08-24 00:14	2024-08-8	Show	GitHub Exploit DB Packet Storm

314717	5.3	MEDIUM Network	hp	instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results…	NVD-CWE-noinfo	CVE-2024-42396	2024-08-24 00:07	2024-08-7	Show	GitHub Exploit DB Packet Storm

314718	5.3	MEDIUM Network	arubanetworks hp	arubaos instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to…	NVD-CWE-noinfo	CVE-2024-42400	2024-08-24 00:06	2024-08-7	Show	GitHub Exploit DB Packet Storm

314719	5.3	MEDIUM Network	arubanetworks hp	arubaos instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to…	NVD-CWE-noinfo	CVE-2024-42399	2024-08-24 00:06	2024-08-7	Show	GitHub Exploit DB Packet Storm

314720	5.3	MEDIUM Network	arubanetworks hp	arubaos instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to…	NVD-CWE-noinfo	CVE-2024-42398	2024-08-24 00:06	2024-08-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed