Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228641	8.5	危険	IBM	-	IBM Domino の Java コンソールにおける一時的な資格をハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2013-0487	2013-03-28 15:23	2013-03-21	Show	GitHub Exploit DB Packet Storm

228642	1.5	注意	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0525	2013-03-28 15:17	2013-03-21	Show	GitHub Exploit DB Packet Storm

228643	4.3	警告	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5943	2013-03-28 14:27	2013-03-21	Show	GitHub Exploit DB Packet Storm

228644	5	警告	IBM	-	Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0486	2013-03-28 12:00	2013-03-28	Show	GitHub Exploit DB Packet Storm

228645	5	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3558	2013-03-27 17:37	2011-10-18	Show	GitHub Exploit DB Packet Storm

228646	4.3	警告	ヒューレット・パッカードアドビシステムズ日立	-	Adobe Flex SDK におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2461	2013-03-27 17:33	2011-11-30	Show	GitHub Exploit DB Packet Storm

228647	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2460	2013-03-27 17:32	2011-11-10	Show	GitHub Exploit DB Packet Storm

228648	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2459	2013-03-27 17:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

228649	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるクロスドメインポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2458	2013-03-27 17:29	2011-11-10	Show	GitHub Exploit DB Packet Storm

228650	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2457	2013-03-27 17:27	2011-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319731	7.5	HIGH Network	sigstore	sigstore-go	sigstore-go, a Go library for Sigstore signing and verification, is susceptible to a denial of service attack in versions prior to 0.6.1 when a verifier is provided a maliciously crafted Sigstore Bun…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2024-45395	2024-09-25 01:50	2024-09-5	Show	GitHub Exploit DB Packet Storm

319732	4.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2, where group runners information was disclosed to un…	NVD-CWE-noinfo	CVE-2024-6685	2024-09-25 01:48	2024-09-17	Show	GitHub Exploit DB Packet Storm

319733	6.1	MEDIUM Network	cern	indico	Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In Indico prior to version 3.3.4, corresponding to Flask-Multipass prior to version 0.…	CWE-79 Cross-site Scripting	CVE-2024-45399	2024-09-25 01:48	2024-09-5	Show	GitHub Exploit DB Packet Storm

319734	6.7	MEDIUM Local	qnap	qvr_smart_client	An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized c…	CWE-428 Unquoted Search Path or Element	CVE-2022-27592	2024-09-25 01:44	2024-09-7	Show	GitHub Exploit DB Packet Storm

319735	7.5	HIGH Network	draytek	vigor3910_firmware	Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.	CWE-120 Classic Buffer Overflow	CVE-2024-46580	2024-09-25 01:42	2024-09-19	Show	GitHub Exploit DB Packet Storm

319736	7.5	HIGH Network	draytek	vigor3910_firmware	Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted …	CWE-120 Classic Buffer Overflow	CVE-2024-46571	2024-09-25 01:42	2024-09-19	Show	GitHub Exploit DB Packet Storm

319737	7.5	HIGH Network	draytek	vigor3910_firmware	Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.	CWE-120 Classic Buffer Overflow	CVE-2024-46568	2024-09-25 01:42	2024-09-19	Show	GitHub Exploit DB Packet Storm

319738	7.5	HIGH Network	draytek	vigor3910_firmware	Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted…	CWE-120 Classic Buffer Overflow	CVE-2024-46567	2024-09-25 01:42	2024-09-19	Show	GitHub Exploit DB Packet Storm

319739	7.5	HIGH Network	draytek	vigor3910_firmware	Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a cra…	CWE-120 Classic Buffer Overflow	CVE-2024-46550	2024-09-25 01:42	2024-09-19	Show	GitHub Exploit DB Packet Storm

319740	7.2	HIGH Network	qnap	qts	An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have alre…	CWE-78 OS Command	CVE-2023-39300	2024-09-25 01:42	2024-09-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed