Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228671	10	危険	オラクル	-	Oracle Sun GlassFish Web Space Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1712	2012-12-25 14:07	2012-06-26	Show	GitHub Exploit DB Packet Storm

228672	7.5	危険	MySQL AB オラクル	-	MySQL で使用される yaSSL におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0882	2012-12-25 13:52	2012-12-4	Show	GitHub Exploit DB Packet Storm

228673	4.3	警告	The Perl Foundation	-	Perl の File::Glob モジュールにおけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-Other その他	CVE-2011-2728	2012-12-25 13:45	2012-12-21	Show	GitHub Exploit DB Packet Storm

228674	1.9	注意	GNOME Project	-	GNOME Display Manager における権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-2387	2012-12-25 13:44	2010-06-2	Show	GitHub Exploit DB Packet Storm

228675	4	警告	レッドハット VMware Samba Project	-	Samba Web Administration Tool におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-2522	2012-12-21 17:34	2011-07-26	Show	GitHub Exploit DB Packet Storm

228676	4.4	警告	ターボリナックス VMware レッドハット Samba Project	-	Samba の smbfs における権限を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0787	2012-12-21 16:50	2010-02-26	Show	GitHub Exploit DB Packet Storm

228677	2.1	注意	レッドハット VMware Samba Project	-	Samba の client/mount.cifs.c におけるサービス運用妨害 (mtab 破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0547	2012-12-21 16:48	2010-02-4	Show	GitHub Exploit DB Packet Storm

228678	9.3	危険	VMware RPM レッドハット	-	RPM におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3378	2012-12-21 16:47	2011-12-24	Show	GitHub Exploit DB Packet Storm

228679	7.2	危険	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Package Manager の lib/fsm.c における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2059	2012-12-21 16:46	2010-06-8	Show	GitHub Exploit DB Packet Storm

228680	7.2	危険	VMware Linux	-	Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2517	2012-12-21 16:44	2012-05-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319221	7.8	HIGH Local	intel	oneapi_base_toolkit integrated_performance_primitives	Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28887	2024-09-13 03:51	2024-08-14	Show	GitHub Exploit DB Packet Storm

319222	7.8	HIGH Local	intel	nuc_x15_laptop_kit_lapac71h nuc_x15_laptop_kit_lapac71g nuc_x15_laptop_kit_lapkc71f nuc_x15_laptop_kit_lapkc71e nuc_x15_laptop_kit_lapkc51e nuc_m15_laptop_kit_lapbc710 nuc_m15_lapto…	Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local acc…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-25561	2024-09-13 03:50	2024-08-14	Show	GitHub Exploit DB Packet Storm

319223	7.8	HIGH Local	intel	license_manager_for_flexim	Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local…	CWE-427 Uncontrolled Search Path Element	CVE-2024-24977	2024-09-13 03:45	2024-08-14	Show	GitHub Exploit DB Packet Storm

319224	7.8	HIGH Local	intel	flexlm_license_daemons_for_intel_fpga	Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via lo…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-23908	2024-09-13 03:43	2024-08-14	Show	GitHub Exploit DB Packet Storm

319225	9.8	CRITICAL Network	openedx	openedx	This openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Transifex. Before moving to pulling translations from the openedx-translations repos…	CWE-74 Injection	CVE-2024-43782	2024-09-13 03:29	2024-08-24	Show	GitHub Exploit DB Packet Storm

319226	7.8	HIGH Local	steveklabnik	request_store	RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to …	CWE-276 Incorrect Default Permissions	CVE-2024-43791	2024-09-13 03:26	2024-08-24	Show	GitHub Exploit DB Packet Storm

319227	8.8	HIGH Local	intel	ethernet_800_series_controllers_driver	Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of pri…	CWE-787 Out-of-bounds Write	CVE-2024-23497	2024-09-13 03:26	2024-08-14	Show	GitHub Exploit DB Packet Storm

319228	6.1	MEDIUM Network	jeesite	jeesite	A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file /js/a/login of the component Cookie Handler. The manipulati…	CWE-79 Cross-site Scripting	CVE-2024-8112	2024-09-13 03:23	2024-08-24	Show	GitHub Exploit DB Packet Storm

319229	5.4	MEDIUM Network	pretix	pretix	Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tags into e-mail previews on settings page. The default Content Security Policy of…	CWE-79 Cross-site Scripting	CVE-2024-8113	2024-09-13 03:21	2024-08-24	Show	GitHub Exploit DB Packet Storm

319230	6.5	MEDIUM Network	gethomepage	homepage	Homepage is a highly customizable homepage with Docker and service API integrations. The default setup of homepage 0.9.1 is vulnerable to DNS rebinding. Homepage is setup without certificate and auth…	CWE-290 Authentication Bypass by Spoofing	CVE-2024-42364	2024-09-13 03:20	2024-08-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed