Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228331	4.9	警告	Puppet Canonical	-	Puppet における任意のカタログを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1652	2013-04-23 13:54	2013-03-12	Show	GitHub Exploit DB Packet Storm

228332	6.8	警告	Lester Chan	-	WordPress 用 WP-DownloadManager プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2697	2013-04-23 12:23	2013-04-5	Show	GitHub Exploit DB Packet Storm

228333	4.3	警告	Novell	-	Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1086	2013-04-23 12:14	2013-04-16	Show	GitHub Exploit DB Packet Storm

228334	9.3	危険	Bitberry Software	-	BitZipper にメモリ破壊の脆弱性	CWE-Other その他	CVE-2013-0138	2013-04-23 11:40	2013-04-19	Show	GitHub Exploit DB Packet Storm

228335	1.9	注意	AVAST Software s.r.o.	-	avast! Mobile Security にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0122	2013-04-23 11:25	2013-04-10	Show	GitHub Exploit DB Packet Storm

228336	3.5	注意	pd-admin	-	pd-admin にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0129	2013-04-23 11:09	2013-04-16	Show	GitHub Exploit DB Packet Storm

228337	7.8	危険	Arecont Vision	-	AV1355DN にサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0139	2013-04-22 16:55	2013-04-15	Show	GitHub Exploit DB Packet Storm

228338	4.9	警告	シスコシステムズ	-	Cisco ASA 上で稼働するクライアントレス SSL VPN におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2013-1199	2013-04-22 16:49	2013-04-17	Show	GitHub Exploit DB Packet Storm

228339	7.5	危険	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-Other その他	CVE-2013-1453	2013-04-22 16:48	2013-02-4	Show	GitHub Exploit DB Packet Storm

228340	5	警告	シスコシステムズ	-	Cisco ASA デバイスの ISAKMP の実装におけるグループを列挙される脆弱性	CWE-200 情報漏えい	CVE-2013-1194	2013-04-22 16:46	2013-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319521	-		-	-	Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.	-	CVE-2023-41612	2024-09-20 23:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

319522	6.5	MEDIUM Network	syscomgo	omflow	OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of ot…	NVD-CWE-noinfo	CVE-2024-8780	2024-09-20 23:35	2024-09-16	Show	GitHub Exploit DB Packet Storm

319523	6.5	MEDIUM Network	syscomgo	omflow	OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files.	CWE-22 Path Traversal	CVE-2024-8778	2024-09-20 23:23	2024-09-16	Show	GitHub Exploit DB Packet Storm

319524	7.5	HIGH Network	syscomgo	omflow	OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can…	CWE-522 Insufficiently Protected Credentials	CVE-2024-8777	2024-09-20 23:22	2024-09-16	Show	GitHub Exploit DB Packet Storm

319525	6.5	MEDIUM Network	ibm	aspera_shares	IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.	CWE-613 Insufficient Session Expiration	CVE-2024-38315	2024-09-20 23:09	2024-09-17	Show	GitHub Exploit DB Packet Storm

319526	7.8	HIGH Local	mattermost	mattermost_desktop	Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of …	CWE-427 Uncontrolled Search Path Element	CVE-2024-39613	2024-09-20 22:59	2024-09-16	Show	GitHub Exploit DB Packet Storm

319527	5.3	MEDIUM Physics	rfideas	micard_plus_ci_firmware micard_plus_ble_firmware	The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card read…	NVD-CWE-noinfo	CVE-2024-1578	2024-09-20 22:53	2024-09-16	Show	GitHub Exploit DB Packet Storm

319528	6.1	MEDIUM Network	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible	CWE-79 Cross-site Scripting	CVE-2024-46970	2024-09-20 22:23	2024-09-16	Show	GitHub Exploit DB Packet Storm

319529	5.0	MEDIUM Network	nozominetworks	cmc guardian	An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with r…	CWE-863 Incorrect Authorization	CVE-2024-4465	2024-09-20 22:15	2024-09-12	Show	GitHub Exploit DB Packet Storm

319530	5.5	MEDIUM Local	samsung	exynos_980_firmware exynos_850_firmware exynos_1080_firmware exynos_1280_firmware exynos_1380_firmware exynos_1330_firmware exynos_1480_firmware exynos_w920_firmware exynos_w9…	An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_b…	CWE-787 Out-of-bounds Write	CVE-2024-27365	2024-09-20 22:09	2024-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed