Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250651	2.6	注意	amix	-	Skeletonz CMS 1.0 のコメント機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4734	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

250652	4.3	警告	LightNEasy	-	LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4753	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250653	6.8	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4752	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250654	6	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4751	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250655	6.8	警告	blogcms	-	BLOG:CMS の admin/libs/ADMIN.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4750	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250656	6.8	警告	Zikula Foundation	-	Zikula におけるクロスサイトリクエストフォージェリ攻撃を誘発される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4729	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

250657	5	警告	Zikula Foundation	-	Zikula における乱数化をベースにした保護機能を破られる脆弱性	CWE-310 暗号の問題	CVE-2010-4728	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

250658	10	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4727	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

250659	10	危険	Smarty	-	Smarty の math プラグインにおける詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4726	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

250660	10	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4725	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311621	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix memfd_pin_folios free_huge_pages leak memfd_pin_folios followed by unpin_folios fails to restore free_huge_pages …	NVD-CWE-Other	CVE-2024-49964	2024-11-8 04:20	2024-10-22	Show	GitHub Exploit DB Packet Storm

311622	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: static_call: Replace pointless WARN_ON() in static_call_module_notify() static_call_module_notify() triggers a WARN_ON(), when me…	NVD-CWE-noinfo	CVE-2024-49954	2024-11-8 04:16	2024-10-22	Show	GitHub Exploit DB Packet Storm

311623	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice The km.state is not checked in driver's delayed work. When xfr…	CWE-672 Operation on a Resource after Expiration or Release	CVE-2024-49953	2024-11-8 02:44	2024-10-22	Show	GitHub Exploit DB Packet Storm

311624	-		-	-	An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 05.37.42, 5.4 before 05.45.39, 5.5 before 05.53.39, and 5.6 before 05.60.39 that …	-	CVE-2023-28149	2024-11-8 02:35	2024-08-1	Show	GitHub Exploit DB Packet Storm

311625	4.8	MEDIUM Network	agendaless	waitress	Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recv_bytes (defaults to 8192) long, followed by a secondary request using HTTP…	CWE-444 CWE-367 HTTP Request Smuggling Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2024-49768	2024-11-8 02:28	2024-10-30	Show	GitHub Exploit DB Packet Storm

311626	2.7	LOW Network	nirmata	kyverno	Kyverno is a policy engine designed for Kubernetes. A kyverno ClusterPolicy, ie. "disallow-privileged-containers," can be overridden by the creation of a PolicyException in a random namespace. By des…	CWE-863 Incorrect Authorization	CVE-2024-48921	2024-11-8 02:20	2024-10-30	Show	GitHub Exploit DB Packet Storm

311627	9.8	CRITICAL Network	servicenow	servicenow	ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context…	CWE-94 Code Injection	CVE-2024-8923	2024-11-8 02:18	2024-10-30	Show	GitHub Exploit DB Packet Storm

311628	7.5	HIGH Network	servicenow	servicenow	ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. Serv…	CWE-89 SQL Injection	CVE-2024-8924	2024-11-8 02:16	2024-10-30	Show	GitHub Exploit DB Packet Storm

311629	7.8	HIGH Local	autodesk	autocad_architecture autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d civil_3d advance_steel autocad	A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cau…	CWE-787 Out-of-bounds Write	CVE-2024-8587	2024-11-8 02:15	2024-10-30	Show	GitHub Exploit DB Packet Storm

311630	3.3	LOW Local	hashicorp	vagrant_vmware_utility	The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system wr…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-10228	2024-11-8 02:12	2024-10-30	Show	GitHub Exploit DB Packet Storm