Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228711	7.5	危険	PreProject.com	-	Pre Projects Pre Real Estate Listings の manager/login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6796	2012-12-20 19:10	2009-05-7	Show	GitHub Exploit DB Packet Storm

228712	7.5	危険	sfs ez pub	-	SFS EZ Pub Site の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6794	2012-12-20 19:10	2009-05-7	Show	GitHub Exploit DB Packet Storm

228713	7.5	危険	scripts-for-sites	-	SFS EZ Adult Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6784	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

228714	7.5	危険	scripts-for-sites	-	SFS EZ Home Business Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6783	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

228715	7.5	危険	scripts-for-sites	-	SFS EZ Hosting Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6782	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

228716	7.5	危険	scripts-for-sites	-	SFS Gaming Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6781	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

228717	7.5	危険	scripts-for-sites	-	SFS SFS EZ Affiliate の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6780	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

228718	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Sarkilar モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6779	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

228719	7.5	危険	scripts-for-sites	-	SFS EZ Auction の viewfaqs.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6778	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

228720	7.5	危険	scripts-for-sites	-	SFS EZ Hot or Not の viewcomments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6776	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311111	9.8	CRITICAL Network	rittal	iot_interface_firmware cmc_iii_processing_units_firmware	The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which…	CWE-331 Insufficient Entropy	CVE-2024-47945	2024-10-22 04:41	2024-10-15	Show	GitHub Exploit DB Packet Storm

311112	7.8	HIGH Local	autodesk	revit	A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, o…	CWE-787 Out-of-bounds Write	CVE-2024-7994	2024-10-22 03:35	2024-10-17	Show	GitHub Exploit DB Packet Storm

311113	7.8	HIGH Local	autodesk	revit	A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or exec…	CWE-787 Out-of-bounds Write	CVE-2024-7993	2024-10-22 03:27	2024-10-17	Show	GitHub Exploit DB Packet Storm

311114	4.9	MEDIUM Network	oracle	application_express	Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23.2 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with netw…	NVD-CWE-noinfo	CVE-2024-21261	2024-10-22 03:27	2024-10-16	Show	GitHub Exploit DB Packet Storm

311115	8.8	HIGH Network	vmware	vmware_hcx	An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted …	CWE-89 SQL Injection	CVE-2024-38814	2024-10-22 03:20	2024-10-17	Show	GitHub Exploit DB Packet Storm

311116	7.5	HIGH Network	microsoft	.net visual_studio_2022	.NET and Visual Studio Denial of Service Vulnerability	NVD-CWE-noinfo	CVE-2024-43485	2024-10-22 03:01	2024-10-9	Show	GitHub Exploit DB Packet Storm

311117	7.5	HIGH Network	microsoft	.net_framework .net visual_studio_2022	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability	NVD-CWE-noinfo	CVE-2024-43484	2024-10-22 02:35	2024-10-9	Show	GitHub Exploit DB Packet Storm

311118	7.5	HIGH Network	microsoft	.net_framework .net visual_studio_2022	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability	NVD-CWE-noinfo	CVE-2024-43483	2024-10-22 02:35	2024-10-9	Show	GitHub Exploit DB Packet Storm

311119	-		microsoft	internet_explorer	The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initializ…	CWE-94 Code Injection	CVE-2010-1260	2024-10-22 02:35	2010-06-9	Show	GitHub Exploit DB Packet Storm

311120	-		microsoft	internet_explorer windows_2003_server windows_7 windows_server_2003 windows_server_2008 windows_vista windows_xp	Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and de…	CWE-94 Code Injection	CVE-2010-0492	2024-10-22 02:35	2010-04-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed