Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249361	6.8	警告	アップルサイバートラスト株式会社 NTP Project ヒューレット・パッカードターボリナックスオラクル VMware レッドハット	-	NTP の ntpq における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0159	2012-03-27 11:35	2009-04-14	Show	GitHub Exploit DB Packet Storm

249362	5	警告	アップルサイバートラスト株式会社レッドハットオラクル NTP Project	-	NTP における証明書チェーンの有効性を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-0021	2012-03-27 11:01	2009-01-7	Show	GitHub Exploit DB Packet Storm

249363	5	警告	アップルサイバートラスト株式会社 PNG Development Group オラクル VMware レッドハット	-	libpng に含まれる pngrutil.c におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-2249	2012-03-27 10:32	2010-06-26	Show	GitHub Exploit DB Packet Storm

249364	7.5	危険	アップルサイバートラスト株式会社 Mozilla Foundation PNG Development Group オラクル VMware フェンリル株式会社レッドハット	-	libpng に脆弱性	CWE-119 バッファエラー	CVE-2010-1205	2012-03-27 10:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

249365	7.8	危険	アップルサイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社レッドハット	-	libpng における圧縮された補助チャンクの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-0205	2012-03-27 10:22	2010-03-4	Show	GitHub Exploit DB Packet Storm

249366	7.5	危険	クアンタムデル IBM	-	複数のテープライブラリ製品におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-1844	2012-03-26 18:12	2012-03-22	Show	GitHub Exploit DB Packet Storm

249367	5	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1841	2012-03-26 18:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

249368	5	警告	LG-Nortel	-	LG-Nortel ELO GS24M に複数の脆弱性	CWE-287 不適切な認証	CVE-2012-1838	2012-03-26 16:29	2012-03-22	Show	GitHub Exploit DB Packet Storm

249369	7.5	危険	Webglimpse	-	WebGlimpse に OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1795	2012-03-26 16:24	2012-03-20	Show	GitHub Exploit DB Packet Storm

249370	7.5	危険	Pydio	-	AjaXplorer におけるログインのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-1840	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314141	7.2	HIGH Network	-	-	The News Flash theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input from the newsflash_post_meta meta value. Th…	-	CVE-2024-7560	2024-08-8 11:15	2024-08-8	Show	GitHub Exploit DB Packet Storm

314142	8.8	HIGH Network	-	-	The MultiPurpose theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.0 via deserialization of untrusted input through the 'wpeden_post_meta' post meta.…	-	CVE-2024-7486	2024-08-8 11:15	2024-08-8	Show	GitHub Exploit DB Packet Storm

314143	8.5	HIGH Network	-	-	An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-38206	2024-08-8 11:15	2024-08-7	Show	GitHub Exploit DB Packet Storm

314144	8.2	HIGH Network	-	-	An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link.	CWE-79 Cross-site Scripting	CVE-2024-38166	2024-08-8 11:15	2024-08-7	Show	GitHub Exploit DB Packet Storm

314145	-		-	-	Format string vulnerability in vsybase.c in vpopmail 5.4.2 and earlier has unknown impact and attack vectors. NOTE: in a followup post, it was observed that the source code used constants that, when…	NVD-CWE-Other	CVE-2004-2238	2024-08-8 11:15	2004-12-31	Show	GitHub Exploit DB Packet Storm

314146	-		gnu	less	Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings …	NVD-CWE-Other	CVE-2004-2264	2024-08-8 11:15	2004-12-31	Show	GitHub Exploit DB Packet Storm

314147	-		microsoft	windows_2000 windows_2003_server windows_xp	Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl f…	NVD-CWE-Other	CVE-2004-2339	2024-08-8 11:15	2004-12-31	Show	GitHub Exploit DB Packet Storm

314148	-		apache	http_server	Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. …	NVD-CWE-Other	CVE-2004-2343	2024-08-8 11:15	2004-12-31	Show	GitHub Exploit DB Packet Storm

314149	-		mozilla	firefox	Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a…	NVD-CWE-Other	CVE-2004-2657	2024-08-8 11:15	2004-12-31	Show	GitHub Exploit DB Packet Storm

314150	-		zonelabs	zonealarm	Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissio…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2004-2713	2024-08-8 11:15	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed