Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249471 7.2 危険 マイクロソフト - Microsoft Windows の 32 ビットプラットフォームにおける権限昇格の脆弱性 CWE-noinfo
情報不足 		CVE-2010-3888 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
249472 4.3 警告 アップル - Apple の Mac OS X の Limit Mail 機能におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3887 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
249473 4.3 警告 マイクロソフト - Microsoft mshtml.dll の sertIntoTimeoutList 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3886 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
249474 6.8 警告 CMS Made Simple - CMS Made Simple における管理者パスワードのリセット要求の管理者認証をハイジャックされる脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3884 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
249475 6.8 警告 CMS Made Simple - CMS Made Simple の Change Group Permissions モジュールにおけるクロスサイトリクエストフォージェリ脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3883 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
249476 4.3 警告 CMS Made Simple - CMS Made Simple におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3882 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
249477 4.3 警告 レッドハット - Red Hat JBoss Enterprise Application Platform の JMX Console におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3878 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249478 4.3 警告 Mahara - Mahara の blocktype/groupviews/theme/raw/groupviews.tpl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3871 2012-03-27 18:42 2010-11-9 Show GitHub Exploit DB Packet Storm
249479 4 警告 レッドハット - RHCS および Dogtag Certificate System における任意の認証番号を生成される脆弱性 CWE-310
暗号の問題 		CVE-2010-3869 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
249480 5.8 警告 レッドハット - RHCS および Dogtag Certificate System における PIN を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-3868 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313541 - - - Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data. - CVE-2023-37227 2024-09-11 02:35 2024-09-10 Show GitHub Exploit DB Packet Storm
313542 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer In af9035_i2c_master_xfer, msg is controlled by user. Whe… CWE-476
 NULL Pointer Dereference 		CVE-2023-52915 2024-09-11 02:12 2024-09-6 Show GitHub Exploit DB Packet Storm
313543 7.5 HIGH
Network 		dlink dir-823g_firmware D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user … CWE-862
 Missing Authorization 		CVE-2024-44408 2024-09-11 02:01 2024-09-7 Show GitHub Exploit DB Packet Storm
313544 9.8 CRITICAL
Network 		dlink di-8100g_firmware D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via msp_info.htm. CWE-77
Command Injection 		CVE-2024-44402 2024-09-11 01:58 2024-09-7 Show GitHub Exploit DB Packet Storm
313545 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to access the protocol field of the VLAN header, valid… CWE-908
 Use of Uninitialized Resource 		CVE-2024-44983 2024-09-11 01:57 2024-09-5 Show GitHub Exploit DB Packet Storm
313546 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe: Free job before xe_exec_queue_put Free job depends on job->vm being valid, the last xe_exec_queue_put can destroy the VM.… CWE-416
 Use After Free 		CVE-2024-44978 2024-09-11 01:51 2024-09-5 Show GitHub Exploit DB Packet Storm
313547 8.6 HIGH
Network 		fogproject fogproject FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 an… CWE-77
Command Injection 		CVE-2024-42348 2024-09-11 01:49 2024-08-3 Show GitHub Exploit DB Packet Storm
313548 5.3 MEDIUM
Network 		fogproject fogproject FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorized and rejected logins via logs stored directly on the root of the web server. F… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-42349 2024-09-11 01:44 2024-08-3 Show GitHub Exploit DB Packet Storm
313549 9.8 CRITICAL
Network 		horizoncloud caterease An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verifi… NVD-CWE-Other
CVE-2024-38886 2024-09-11 01:40 2024-08-3 Show GitHub Exploit DB Packet Storm
313550 9.8 CRITICAL
Network 		horizoncloud caterease An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform SQL Injection due to improper neutralization of s… CWE-89
SQL Injection 		CVE-2024-38889 2024-09-11 01:38 2024-08-3 Show GitHub Exploit DB Packet Storm