Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226931	7.5	危険	qsoft-inc	-	Qsoft K-Rate Premium における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7097	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

226932	5	警告	unica	-	Unica Affinium Campaign のリスナーサーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-7094	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

226933	6.8	警告	unica	-	Unica Affinium Campaign におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7093	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

226934	4.3	警告	unica	-	Unica Affinium Campaign におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7092	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

226935	7.5	危険	Pligg	-	Pligg における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7091	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

226936	7.8	危険	Pligg	-	Pligg におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7090	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

226937	4.3	警告	Pligg	-	Pligg におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7089	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

226938	7.5	危険	thehockeystop	-	TheHockeyStop HockeySTATS Online における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7085	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

226939	7.5	危険	revou	-	ReVou Micro Blogging Twitter クローンにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7083	2012-12-20 19:10	2009-08-25	Show	GitHub Exploit DB Packet Storm

226940	4.3	警告	Simple Machines phpraider	-	Simple Machines phpRaider の不特定のコンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7035	2012-12-20 19:10	2009-08-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312461	7.8	HIGH Local	intel	graphics_performance_analyzers	Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28046	2024-09-7 03:40	2024-08-14	Show	GitHub Exploit DB Packet Storm

312462	5.5	MEDIUM Local	intel	arc_a_graphics iris_xe_graphics	Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-28050	2024-09-7 03:38	2024-08-14	Show	GitHub Exploit DB Packet Storm

312463	7.3	HIGH Local	intel	oneapi_hpc_toolkit trace_analyzer_and_collector	Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28172	2024-09-7 03:36	2024-08-14	Show	GitHub Exploit DB Packet Storm

312464	7.3	HIGH Local	intel	mpi_library oneapi_hpc_toolkit	Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28876	2024-09-7 03:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

312465	9.8	CRITICAL Network	lopalopa	music_management_system	Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter.	CWE-89 SQL Injection	CVE-2024-42783	2024-09-7 03:31	2024-08-22	Show	GitHub Exploit DB Packet Storm

312466	7.2	HIGH Network	ethyca	fides	Fides is an open-source privacy engineering platform. Starting in version 2.19.0 and prior to version 2.44.0, the Email Templating feature uses Jinja2 without proper input sanitization or rendering e…	CWE-94 Code Injection	CVE-2024-45053	2024-09-7 03:20	2024-09-5	Show	GitHub Exploit DB Packet Storm

312467	5.3	MEDIUM Network	ethyca	fides	Fides is an open-source privacy engineering platform. Prior to version 2.44.0, a timing-based username enumeration vulnerability exists in Fides Webserver authentication. This vulnerability allows an…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-45052	2024-09-7 03:18	2024-09-5	Show	GitHub Exploit DB Packet Storm

312468	7.5	HIGH Network	zyxel	nebula_lte3301-plus_firmware nebula_fwa505_firmware nebula_fwa710_firmware nebula_fwa510_firmware wx5600-t0_firmware wx3401-b0_firmware wx3100-t0_firmware scr50axe_firmware px…	A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) condition…	CWE-120 Classic Buffer Overflow	CVE-2024-5412	2024-09-7 03:07	2024-09-3	Show	GitHub Exploit DB Packet Storm

312469	7.5	HIGH Network	transsion	carlcare	Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.	NVD-CWE-noinfo	CVE-2024-7697	2024-09-7 03:04	2024-08-12	Show	GitHub Exploit DB Packet Storm

312470	8.8	HIGH Local	freebsd	freebsd	The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtio_scsi can exploi…	CWE-909 Missing Initialization of Resource	CVE-2024-8178	2024-09-7 02:35	2024-09-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed