Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228361	5	警告	ヒューレット・パッカードアドビシステムズ日立	-	複数の Adobe 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2093	2013-03-26 16:38	2011-06-14	Show	GitHub Exploit DB Packet Storm

228362	4.3	警告	CloudBees	-	CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0328	2013-03-26 16:35	2013-02-16	Show	GitHub Exploit DB Packet Storm

228363	10	危険	ヒューレット・パッカードアドビシステムズ日立	-	複数の Adobe 製品における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2011-2092	2013-03-26 15:24	2011-06-14	Show	GitHub Exploit DB Packet Storm

228364	5	警告	サン・マイクロシステムズ日立ヒューレット・パッカード	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0872	2013-03-26 15:21	2011-06-7	Show	GitHub Exploit DB Packet Storm

228365	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0866	2013-03-26 15:12	2011-06-10	Show	GitHub Exploit DB Packet Storm

228366	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0864	2013-03-26 15:10	2011-06-7	Show	GitHub Exploit DB Packet Storm

228367	10	危険	サン・マイクロシステムズヒューレット・パッカード	-	Windows 上で稼働する複数の Oracle Java SE の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0817	2013-03-26 15:06	2011-06-7	Show	GitHub Exploit DB Packet Storm

228368	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start におけるポリシーファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0788	2013-03-26 15:04	2011-06-10	Show	GitHub Exploit DB Packet Storm

228369	6.9	警告	Linux	-	Linux Kernel の net/sctp/socket.c における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1828	2013-03-26 15:04	2013-03-20	Show	GitHub Exploit DB Packet Storm

228370	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における設定ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0786	2013-03-26 14:44	2011-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319251	9.8	CRITICAL Network	thinkphp	thinkphp	A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.	CWE-502 Deserialization of Untrusted Data	CVE-2024-44902	2024-09-20 23:55	2024-09-10	Show	GitHub Exploit DB Packet Storm

319252	9.1	CRITICAL Network	baxter	connex_health_portal	In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex po…	NVD-CWE-noinfo	CVE-2024-6796	2024-09-20 23:53	2024-09-10	Show	GitHub Exploit DB Packet Storm

319253	9.8	CRITICAL Network	baxter	connex_health_portal	In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.…	CWE-89 SQL Injection	CVE-2024-6795	2024-09-20 23:53	2024-09-10	Show	GitHub Exploit DB Packet Storm

319254	9.8	CRITICAL Network	sfs	winsure	Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection.This issue affects ww.Winsure: before 4.6.2.	CWE-94 Code Injection	CVE-2024-7104	2024-09-20 23:44	2024-09-17	Show	GitHub Exploit DB Packet Storm

319255	-		-	-	runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and audi…	-	CVE-2024-46959	2024-09-20 23:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

319256	-		-	-	An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38…	-	CVE-2024-45523	2024-09-20 23:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

319257	-		-	-	Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.	-	CVE-2023-41612	2024-09-20 23:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

319258	6.5	MEDIUM Network	syscomgo	omflow	OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of ot…	NVD-CWE-noinfo	CVE-2024-8780	2024-09-20 23:35	2024-09-16	Show	GitHub Exploit DB Packet Storm

319259	6.5	MEDIUM Network	syscomgo	omflow	OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files.	CWE-22 Path Traversal	CVE-2024-8778	2024-09-20 23:23	2024-09-16	Show	GitHub Exploit DB Packet Storm

319260	7.5	HIGH Network	syscomgo	omflow	OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can…	CWE-522 Insufficiently Protected Credentials	CVE-2024-8777	2024-09-20 23:22	2024-09-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed