Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248781	7.2	危険	NRL	-	OPIE の opiesu.c における権限を取得される脆弱性	CWE-189 数値処理の問題	CVE-2011-2489	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

248782	5	警告	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-2488	2012-03-27 18:43	2011-04-4	Show	GitHub Exploit DB Packet Storm

248783	2.6	注意	The Icinga Project	-	Icinga の config.c におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2477	2012-03-27 18:43	2011-06-14	Show	GitHub Exploit DB Packet Storm

248784	4.3	警告	Coppermine Photo Gallery	-	CPG におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2476	2012-03-27 18:43	2011-06-2	Show	GitHub Exploit DB Packet Storm

248785	10	危険	サイベース	-	Sybase OneBridge Mobile Data Suite の ECTrace.dll における任意のコードを実行される脆弱性	CWE-134 書式文字列の問題	CVE-2011-2475	2012-03-27 18:43	2011-06-9	Show	GitHub Exploit DB Packet Storm

248786	5	警告	サイベース	-	Sybase EAServer Developer Edition の HTTP Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2474	2012-03-27 18:43	2011-06-9	Show	GitHub Exploit DB Packet Storm

248787	6.3	警告	maynard johnson	-	OProfile の do_dump_data 関数における任意のファイルを作成または上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-2473	2012-03-27 18:43	2011-06-9	Show	GitHub Exploit DB Packet Storm

248788	6.3	警告	maynard johnson	-	OProfile の utils/opcontrol におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2472	2012-03-27 18:43	2011-06-9	Show	GitHub Exploit DB Packet Storm

248789	7.2	危険	maynard johnson	-	OProfile の utils/opcontrol における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2471	2012-03-27 18:43	2011-06-9	Show	GitHub Exploit DB Packet Storm

248790	4.3	警告	reallysimplechat	-	ARSC におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2470	2012-03-27 18:43	2011-06-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314241	7.8	HIGH Local	intel	graphics_performance_analyzers	Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28046	2024-09-7 03:40	2024-08-14	Show	GitHub Exploit DB Packet Storm

314242	5.5	MEDIUM Local	intel	arc_a_graphics iris_xe_graphics	Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-28050	2024-09-7 03:38	2024-08-14	Show	GitHub Exploit DB Packet Storm

314243	7.3	HIGH Local	intel	oneapi_hpc_toolkit trace_analyzer_and_collector	Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28172	2024-09-7 03:36	2024-08-14	Show	GitHub Exploit DB Packet Storm

314244	7.3	HIGH Local	intel	mpi_library oneapi_hpc_toolkit	Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-28876	2024-09-7 03:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

314245	9.8	CRITICAL Network	lopalopa	music_management_system	Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter.	CWE-89 SQL Injection	CVE-2024-42783	2024-09-7 03:31	2024-08-22	Show	GitHub Exploit DB Packet Storm

314246	7.2	HIGH Network	ethyca	fides	Fides is an open-source privacy engineering platform. Starting in version 2.19.0 and prior to version 2.44.0, the Email Templating feature uses Jinja2 without proper input sanitization or rendering e…	CWE-94 Code Injection	CVE-2024-45053	2024-09-7 03:20	2024-09-5	Show	GitHub Exploit DB Packet Storm

314247	5.3	MEDIUM Network	ethyca	fides	Fides is an open-source privacy engineering platform. Prior to version 2.44.0, a timing-based username enumeration vulnerability exists in Fides Webserver authentication. This vulnerability allows an…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-45052	2024-09-7 03:18	2024-09-5	Show	GitHub Exploit DB Packet Storm

314248	7.5	HIGH Network	zyxel	nebula_lte3301-plus_firmware nebula_fwa505_firmware nebula_fwa710_firmware nebula_fwa510_firmware wx5600-t0_firmware wx3401-b0_firmware wx3100-t0_firmware scr50axe_firmware px…	A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) condition…	CWE-120 Classic Buffer Overflow	CVE-2024-5412	2024-09-7 03:07	2024-09-3	Show	GitHub Exploit DB Packet Storm

314249	7.5	HIGH Network	transsion	carlcare	Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.	NVD-CWE-noinfo	CVE-2024-7697	2024-09-7 03:04	2024-08-12	Show	GitHub Exploit DB Packet Storm

314250	8.8	HIGH Local	freebsd	freebsd	The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtio_scsi can exploi…	CWE-909 Missing Initialization of Resource	CVE-2024-8178	2024-09-7 02:35	2024-09-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed