Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224971	10	危険	アドビシステムズ	-	Adobe ColdFusion における ColdFusion Components 公開メソッドを呼び出される脆弱性	CWE-Other その他	CVE-2013-3350	2013-07-11 18:03	2013-07-9	Show	GitHub Exploit DB Packet Storm

224972	5	警告	アドビシステムズ	-	Adobe ColdFusion におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-3349	2013-07-11 18:01	2013-07-9	Show	GitHub Exploit DB Packet Storm

224973	10	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3348	2013-07-11 16:57	2013-07-9	Show	GitHub Exploit DB Packet Storm

224974	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2013-3347	2013-07-11 16:57	2013-07-9	Show	GitHub Exploit DB Packet Storm

224975	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3345	2013-07-11 16:57	2013-07-9	Show	GitHub Exploit DB Packet Storm

224976	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3344	2013-07-11 16:56	2013-07-9	Show	GitHub Exploit DB Packet Storm

224977	9.3	危険	Google	-	Android における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2013-4787	2013-07-11 09:58	2013-07-3	Show	GitHub Exploit DB Packet Storm

224978	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1022	2013-07-10 16:42	2013-05-22	Show	GitHub Exploit DB Packet Storm

224979	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1018	2013-07-10 16:39	2013-05-22	Show	GitHub Exploit DB Packet Storm

224980	10	危険	Super Micro Computer	-	Supermicro の BMC の実装における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2013-4782	2013-07-10 13:47	2013-07-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315371	7.3	HIGH Local	cisco	meraki_systems_manager	A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to execute arbitrary code with elevated privileges.  This vulnerability is …	CWE-427 Uncontrolled Search Path Element	CVE-2024-20430	2024-09-19 03:56	2024-09-13	Show	GitHub Exploit DB Packet Storm

315372	8.8	HIGH Network	owasp	defectdojo	An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component.	NVD-CWE-Other	CVE-2023-48171	2024-09-19 03:54	2024-08-13	Show	GitHub Exploit DB Packet Storm

315373	7.5	HIGH Network	i-doit	i-doit	SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cm…	CWE-89 SQL Injection	CVE-2024-8749	2024-09-19 03:53	2024-09-12	Show	GitHub Exploit DB Packet Storm

315374	8.8	HIGH Network	sir	gnuboard	Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.	CWE-346 Origin Validation Error	CVE-2024-41475	2024-09-19 03:51	2024-08-13	Show	GitHub Exploit DB Packet Storm

315375	9.8	CRITICAL Network	soplanning	soplanning	An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulne…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-27113	2024-09-19 03:43	2024-09-11	Show	GitHub Exploit DB Packet Storm

315376	9.8	CRITICAL Network	soplanning	soplanning	A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying d…	CWE-89 SQL Injection	CVE-2024-27112	2024-09-19 03:42	2024-09-11	Show	GitHub Exploit DB Packet Storm

315377	9.8	CRITICAL Network	agpt	autogpt	A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific com…	CWE-78 OS Command	CVE-2024-6091	2024-09-19 03:41	2024-09-11	Show	GitHub Exploit DB Packet Storm

315378	9.8	CRITICAL Network	reedos	aim-star	This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulner…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2024-45790	2024-09-19 03:38	2024-09-11	Show	GitHub Exploit DB Packet Storm

315379	7.5	HIGH Network	pxlrbt	filament_excel	Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the …	CWE-22 Path Traversal	CVE-2024-42485	2024-09-19 03:31	2024-08-13	Show	GitHub Exploit DB Packet Storm

315380	6.5	MEDIUM Adjacent	zyxel	gs1900-48hpv2_firmware gs1900-48_firmware gs1900-24hpv2_firmware gs1900-24ep_firmware gs1900-24e_firmware gs1900-24_firmware gs1900-16_firmware gs1900-10hp_firmware gs1900-8hp…	An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2…	CWE-331 Insufficient Entropy	CVE-2024-38270	2024-09-19 03:23	2024-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed