Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230861	9.3	危険	pierreegougelet	-	Windows 上で稼動する GFL SDK の Pierre-emmanuel Gougelet XnView などにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0064	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

230862	10	危険	トレンドマイクロ	-	Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0014	2012-12-20 18:34	2008-11-17	Show	GitHub Exploit DB Packet Storm

230863	10	危険	トレンドマイクロ	-	Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0013	2012-12-20 18:34	2008-11-17	Show	GitHub Exploit DB Packet Storm

230864	10	危険	トレンドマイクロ	-	Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0012	2012-12-20 18:34	2008-11-17	Show	GitHub Exploit DB Packet Storm

230865	7.2	危険	PulseAudio	-	PulseAudio の pa_drop_root 関数における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2008-0008	2012-12-20 18:34	2008-01-28	Show	GitHub Exploit DB Packet Storm

230866	4.3	警告	xmb forum	-	XMB におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6728	2012-12-20 18:34	2009-07-5	Show	GitHub Exploit DB Packet Storm

230867	10	危険	synce	-	SynCE (SynCE-dccm) の vdccm におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-6703	2012-12-20 18:34	2008-03-4	Show	GitHub Exploit DB Packet Storm

230868	7.5	危険	Simple DirectMedia Layer	-	SDL_image の IMG_gif.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6697	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

230869	2.1	注意	webcalendar	-	WebCalendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6696	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

230870	5	警告	VideoLAN	-	VideoLAN VLC の RTSP モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6684	2012-12-20 18:34	2008-01-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312521	-		-	-	Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server.	-	CVE-2024-39332	2024-11-2 01:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

312522	-		-	-	Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.	-	CVE-2023-52044	2024-11-2 01:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

312523	-		-	-	The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges t…	CWE-59 Link Following	CVE-2024-45315	2024-11-2 01:35	2024-10-11	Show	GitHub Exploit DB Packet Storm

312524	-		-	-	Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/…	-	CVE-2024-8037	2024-11-2 01:35	2024-10-2	Show	GitHub Exploit DB Packet Storm

312525	9.8	CRITICAL Network	tenda	ac1206_firmware	A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function ate_Tenda_mfg_check_usb/ate_Tenda_mfg_check_usb3 of the file /goform/ate. The m…	CWE-787 Out-of-bounds Write	CVE-2024-10434	2024-11-2 01:32	2024-10-28	Show	GitHub Exploit DB Packet Storm

312526	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, wri…	CWE-787 Out-of-bounds Write	CVE-2024-9997	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

312527	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, …	CWE-787 Out-of-bounds Write	CVE-2024-9996	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

312528	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write …	CWE-787 Out-of-bounds Write	CVE-2024-9489	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

312529	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a …	CWE-908 Use of Uninitialized Resource	CVE-2024-8896	2024-11-2 01:27	2024-10-30	Show	GitHub Exploit DB Packet Storm

312530	7.8	HIGH Local	autodesk	autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt	A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to …	CWE-787 Out-of-bounds Write	CVE-2024-7992	2024-11-2 01:26	2024-10-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed