Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253061	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2991	2011-09-5 10:51	2011-08-16	Show	GitHub Exploit DB Packet Storm

253062	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2989	2011-09-5 10:39	2011-08-16	Show	GitHub Exploit DB Packet Storm

253063	6.9	警告	サイバートラスト株式会社シトリックス・システムズレッドハット	-	Xen の tools/libxc/xc_dom_bzimageloader.c における複数の整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1583	2011-09-2 14:27	2011-05-9	Show	GitHub Exploit DB Packet Storm

253064	7.8	危険	ISC, Inc. レッドハット	-	ISC DHCP サーバにおけるサービス運用妨害 (dhcp デーモンの停止) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2749	2011-09-2 14:26	2011-07-27	Show	GitHub Exploit DB Packet Storm

253065	6.8	警告	GTK+	-	GTK+ における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2010-4831	2011-09-2 12:04	2011-09-2	Show	GitHub Exploit DB Packet Storm

253066	4.3	警告	ジュニパーネットワークス	-	Juniper Networks IDP ACM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5086	2011-09-2 12:03	2011-09-2	Show	GitHub Exploit DB Packet Storm

253067	5.8	警告	Sage	-	Sage において任意のスクリプトが実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4102	2011-09-2 12:03	2011-09-2	Show	GitHub Exploit DB Packet Storm

253068	5.8	警告	Sage	-	Sage において任意のスクリプトが実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3384	2011-09-2 12:03	2011-09-2	Show	GitHub Exploit DB Packet Storm

253069	2.6	注意	Phorum	-	Phorum における複数の脆弱性	CWE-352 CWE-79	CVE-2011-3381 CVE-2011-3382	2011-09-2 12:00	2011-09-2	Show	GitHub Exploit DB Packet Storm

253070	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-119 バッファエラー	CVE-2011-2132	2011-09-1 10:55	2011-08-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311471	8.8	HIGH Network	adobe	commerce magento commerce_b2b	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged a…	NVD-CWE-noinfo	CVE-2024-45148	2024-10-16 22:27	2024-10-10	Show	GitHub Exploit DB Packet Storm

311472	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47009	2024-10-16 22:26	2024-10-9	Show	GitHub Exploit DB Packet Storm

311473	7.5	HIGH Network	ivanti	avalanche	Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47008	2024-10-16 22:24	2024-10-9	Show	GitHub Exploit DB Packet Storm

311474	7.5	HIGH Network	ivanti	avalanche	A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.	CWE-476 NULL Pointer Dereference	CVE-2024-47007	2024-10-16 22:23	2024-10-9	Show	GitHub Exploit DB Packet Storm

311475	6.7	MEDIUM Local	microsoft	windows_server_2012 windows_10_1507 windows_server_2016 windows_server_2022_23h2 windows_10_1809 windows_server_2022 windows_11_21h2 windows_10_21h2 windows_10_22h2 windows…	Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability	NVD-CWE-noinfo	CVE-2024-37983	2024-10-16 22:15	2024-10-9	Show	GitHub Exploit DB Packet Storm

311476	9.8	CRITICAL Network	alisonic	sibylla_firmware	Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database.	CWE-89 SQL Injection	CVE-2024-8630	2024-10-16 22:15	2024-09-28	Show	GitHub Exploit DB Packet Storm

311477	7.5	HIGH Network	opentext	cx-e_voice	Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system.	CWE-22 Path Traversal	CVE-2023-7260	2024-10-16 21:53	2024-08-23	Show	GitHub Exploit DB Packet Storm

311478	-		-	-	There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This …	-	CVE-2024-9858	2024-10-16 18:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

311479	-		-	-	A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead…	CWE-1270 Generation of Incorrect Security Tokens	CVE-2023-32188	2024-10-16 18:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

311480	-		-	-	A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from the configured authentication provider (AP). This characteristic also applies t…	-	CVE-2023-22650	2024-10-16 18:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed