Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249201 7.5 危険 Google - Google Chrome で使用される Skia におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2011-3065 2012-04-4 11:50 2012-03-28 Show GitHub Exploit DB Packet Storm
249202 10 危険 Google - Google Chrome における詳細不明な脆弱性 CWE-20
不適切な入力確認
CVE-2011-3063 2012-04-4 11:48 2012-03-28 Show GitHub Exploit DB Packet Storm
249203 5.8 警告 Google - Google Chrome におけるサーバになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2011-3061 2012-04-4 11:47 2012-03-28 Show GitHub Exploit DB Packet Storm
249204 7.1 危険 マイクロソフト - Windows XP の GPU サポート機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2600 2012-04-3 10:57 2011-06-30 Show GitHub Exploit DB Packet Storm
249205 7.6 危険 マイクロソフト - 複数の Windows 製品で使用される Microsoft Windows Fax Services Cover Page Editor の CDrawPoly::Serialize 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4701 2012-04-3 10:57 2011-01-20 Show GitHub Exploit DB Packet Storm
249206 7.8 危険 マイクロソフト - 複数の Windows 製品の ND プロトコル実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4669 2012-04-3 10:57 2011-01-7 Show GitHub Exploit DB Packet Storm
249207 9.3 危険 マイクロソフト - 複数の Windows 製品の DAO ライブラリにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2010-4182 2012-04-3 10:57 2010-11-4 Show GitHub Exploit DB Packet Storm
249208 7.2 危険 マイクロソフト - 複数の Windows 製品の CreateDIBPalette 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2739 2012-04-3 10:57 2010-09-7 Show GitHub Exploit DB Packet Storm
249209 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall の SIP 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1315 2012-04-2 15:50 2012-03-28 Show GitHub Exploit DB Packet Storm
249210 7.8 危険 シスコシステムズ - Cisco IOS の WAAS Express 機能におけるサービス運用妨害 (メモリ消費またはデバイスリロード) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1314 2012-04-2 15:48 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315541 9.0 CRITICAL
Network
vrcx-team vrcx VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to re… CWE-79
Cross-site Scripting
CVE-2024-42366 2024-08-29 23:04 2024-08-9 Show GitHub Exploit DB Packet Storm
315542 4.8 MEDIUM
Network
concretecms concrete_cms Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName().  A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVS… CWE-79
Cross-site Scripting
CVE-2024-7394 2024-08-29 22:41 2024-08-9 Show GitHub Exploit DB Packet Storm
315543 9.8 CRITICAL
Network
havocframework havoc An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-41570 2024-08-29 22:32 2024-08-12 Show GitHub Exploit DB Packet Storm
315544 - - - Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentia… CWE-788
 Access of Memory Location After End of Buffer
CVE-2024-38304 2024-08-29 22:25 2024-08-29 Show GitHub Exploit DB Packet Storm
315545 - - - Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability. A high privileged attacker with local access could potentially exploit this vu… CWE-20
 Improper Input Validation 
CVE-2024-38303 2024-08-29 22:25 2024-08-29 Show GitHub Exploit DB Packet Storm
315546 7.2 HIGH
Network
- - The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including 2.8. This makes it possible for authenticat… CWE-502
 Deserialization of Untrusted Data
CVE-2022-2440 2024-08-29 22:25 2024-08-29 Show GitHub Exploit DB Packet Storm
315547 - - - The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream messages and parsing the records received based on the configured record type. `aws… - CVE-2024-45043 2024-08-29 22:25 2024-08-29 Show GitHub Exploit DB Packet Storm
315548 - - - Beijing Digital China Cloud Technology Co., Ltd. DCME-320 v.7.4.12.60 has a command execution vulnerability, which can be exploited to obtain device administrator privileges via the getVar function i… - CVE-2024-42905 2024-08-29 22:25 2024-08-29 Show GitHub Exploit DB Packet Storm
315549 - - - A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authe… - CVE-2024-20478 2024-08-29 22:25 2024-08-29 Show GitHub Exploit DB Packet Storm
315550 - - - A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerabi… - CVE-2024-20446 2024-08-29 22:25 2024-08-29 Show GitHub Exploit DB Packet Storm