Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228621	4.3	警告	YourFreeWorld.com	-	YourFreeWorld Programs Rating Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4690	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228622	7.5	危険	resalecode	-	PHP Shopping Cart Selling Website Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4689	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228623	4.3	警告	resalecode	-	PHP Shopping Cart Selling Website Script の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4688	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228624	4.3	警告	phplemon	-	phplemon AdQuick の account.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4686	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228625	4.3	警告	phpscriptsnow	-	PHP Scripts Now Astrology の celebrities.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4685	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228626	7.5	危険	Scriptsez.net	-	Good/Bad Vote の vote.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4683	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228627	4.3	警告	Scriptsez.net	-	Good/Bad Vote の vote.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4682	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228628	4.3	警告	php directory source	-	phpDirectorySource の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4681	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228629	7.5	危険	php directory source	-	phpDirectorySource の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4680	2012-12-20 19:28	2010-03-10	Show	GitHub Exploit DB Packet Storm

228630	4.3	警告	Winn GuestBook	-	Winn Guestbook におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4678	2012-12-20 19:28	2010-03-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310511	-		-	-	Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.	-	CVE-2024-44546	2024-11-20 05:35	2024-11-12	Show	GitHub Exploit DB Packet Storm

310512	-		-	-	In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = route(3333333333333333333,2,1,2,3,1) : *;" leads to stack consumption.	-	CVE-2021-41737	2024-11-20 05:35	2024-11-11	Show	GitHub Exploit DB Packet Storm

310513	-		-	-	An issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in the OAuth2.0 handler, i.e., it does not verify access token validity. An attacker can use a expired acce…	-	CVE-2021-35473	2024-11-20 05:35	2024-11-11	Show	GitHub Exploit DB Packet Storm

310514	8.8	HIGH Network	microsoft	sql_server_2016 sql_server_2017 sql_server_2019	SQL Server Native Client Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-43462	2024-11-20 05:18	2024-11-13	Show	GitHub Exploit DB Packet Storm

310515	-		-	-	Rejected reason: This CVE was previously published at https://bugzilla.redhat.com/show_bug.cgi?id=2262978 but later rejected for the following reason: The flaw requires an attacker to have superuser …	-	CVE-2024-1271	2024-11-20 05:15	2024-11-20	Show	GitHub Exploit DB Packet Storm

310516	9.8	CRITICAL Network	microsoft	.net visual_studio_2022	.NET and Visual Studio Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-43498	2024-11-20 05:01	2024-11-13	Show	GitHub Exploit DB Packet Storm

310517	7.5	HIGH Network	microsoft	.net visual_studio_2022	.NET and Visual Studio Denial of Service Vulnerability	NVD-CWE-noinfo	CVE-2024-43499	2024-11-20 04:59	2024-11-13	Show	GitHub Exploit DB Packet Storm

310518	6.7	MEDIUM Local	intel	server_board_m70klp2sb_firmware	Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-284 Improper Access Control	CVE-2024-39609	2024-11-20 04:58	2024-11-14	Show	GitHub Exploit DB Packet Storm

310519	6.7	MEDIUM Local	intel	m10jnp2sb_firmware	Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access.	NVD-CWE-noinfo	CVE-2024-41167	2024-11-20 04:45	2024-11-14	Show	GitHub Exploit DB Packet Storm

310520	8.1	HIGH Network	apereo	central_authentication_service	A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiratio…	CWE-613 Insufficient Session Expiration	CVE-2024-11208	2024-11-20 04:38	2024-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed