Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249201 9.3 危険 VideoLAN - VideoLAN VLC Media Player の Real demuxer プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3907 2012-03-27 18:42 2010-12-14 Show GitHub Exploit DB Packet Storm
249202 7.5 危険 Eucalyptus Systems - Eucalyptus の管理者のインターフェース のパスワードリセット機能における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-3905 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
249203 5 警告 infradead - OpenConnect におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-3903 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249204 5 警告 infradead - OpenConnect における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3902 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249205 6.4 警告 infradead - OpenConnect における任意の AnyConnect SSL VPN サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3901 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249206 5.8 警告 christian dywan - Midori における任意の HTTPS Web サイトになりすまされる脆弱性 CWE-Other
その他 		CVE-2010-3900 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249207 5 警告 IBM - IBM OmniFind におけるサービス運用妨害 (DoS) 状態となる脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3899 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
249208 5 警告 IBM - IBM OmniFind における認証を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3898 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
249209 5 警告 IBM - IBM OmniFind の ESSearchApplication/palette.do における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-3897 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
249210 7.5 危険 IBM - IBM OmniFind の ESSearchApplication ディレクトリツリーにおけるサーバ設定を変更される脆弱性 CWE-287
不適切な認証 		CVE-2010-3896 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314161 - - - Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php. - CVE-2024-42556 2024-08-22 01:35 2024-08-20 Show GitHub Exploit DB Packet Storm
314162 9.0 CRITICAL
Network 		typecho typecho A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting 		CVE-2024-35540 2024-08-22 01:05 2024-08-21 Show GitHub Exploit DB Packet Storm
314163 8.6 HIGH
Local 		scilico i-librarian Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component. CWE-79
Cross-site Scripting 		CVE-2024-40500 2024-08-22 01:05 2024-08-13 Show GitHub Exploit DB Packet Storm
314164 5.3 MEDIUM
Network 		matrix javascript_sdk matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's g… CWE-674
 Uncontrolled Recursion 		CVE-2024-42369 2024-08-22 01:01 2024-08-21 Show GitHub Exploit DB Packet Storm
314165 8.8 HIGH
Network 		projectcapsule capsule Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e.,… CWE-863
 Incorrect Authorization 		CVE-2024-39690 2024-08-22 01:01 2024-08-21 Show GitHub Exploit DB Packet Storm
314166 5.4 MEDIUM
Network 		3ds 3dexperience A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execu… CWE-79
Cross-site Scripting 		CVE-2024-6378 2024-08-22 00:53 2024-08-20 Show GitHub Exploit DB Packet Storm
314167 9.8 CRITICAL
Network 		gotribe gotribe-admin A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-8003 2024-08-22 00:51 2024-08-20 Show GitHub Exploit DB Packet Storm
314168 9.8 CRITICAL
Network 		demozx gf_cms A vulnerability was found in demozx gf_cms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. T… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-8005 2024-08-22 00:49 2024-08-20 Show GitHub Exploit DB Packet Storm
314169 9.8 CRITICAL
Network 		newlib_project newlib An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. CWE-190
 Integer Overflow or Wraparound 		CVE-2024-30949 2024-08-22 00:48 2024-08-21 Show GitHub Exploit DB Packet Storm
314170 - - - The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins - CVE-2024-6843 2024-08-22 00:35 2024-08-19 Show GitHub Exploit DB Packet Storm