Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253821	10	危険	サン・マイクロシステムズサイバートラスト株式会社 RealVNC レッドハット	-	RealVNC VNC Viewer コンポーネントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4770	2010-05-20 18:03	2009-01-16	Show	GitHub Exploit DB Packet Storm

253822	4.9	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1032	2010-05-19 17:57	2010-04-16	Show	GitHub Exploit DB Packet Storm

253823	9.3	危険	アドビシステムズ	-	複数の Adobe 製品などで利用される Adobe Download Manager におけるバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1278	2010-05-19 17:57	2010-04-15	Show	GitHub Exploit DB Packet Storm

253824	5	警告	The Perl Foundation	-	Perl における UTF-8 文字列の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3626	2010-05-19 17:57	2009-10-29	Show	GitHub Exploit DB Packet Storm

253825	9.3	危険	サン・マイクロシステムズ	-	Java NPAPI plugin および Java Deployment Toolkit における任意のコードを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-1423	2010-05-19 17:56	2010-04-15	Show	GitHub Exploit DB Packet Storm

253826	4.3	警告	ISC, Inc. サイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	BIND 9 の DNSSEC 検証コードに脆弱性	CWE-Other その他	CVE-2010-0097	2010-05-19 17:42	2010-01-20	Show	GitHub Exploit DB Packet Storm

253827	9.3	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の erf ファイル処理に脆弱性	CWE-189 数値処理の問題	CVE-2009-3829	2010-05-19 17:42	2009-10-7	Show	GitHub Exploit DB Packet Storm

253828	10	危険	アップル	-	Apple Mac OS X 上で稼働する Safari における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1120	2010-05-18 16:39	2010-03-25	Show	GitHub Exploit DB Packet Storm

253829	6.9	警告	KDE project サイバートラスト株式会社レッドハット	-	KDE の KDM における制御ソケットの処理に関する権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0436	2010-05-18 16:39	2010-04-13	Show	GitHub Exploit DB Packet Storm

253830	1.9	注意	レッドハット	-	Free Software Foundation Berkeley DB の NSS モジュールにおける情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2010-0826	2010-05-18 16:38	2010-04-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312401	9.8	CRITICAL Network	tenda	fh1206_firmware	A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manip…	CWE-787 Out-of-bounds Write	CVE-2024-7615	2024-08-22 03:48	2024-08-12	Show	GitHub Exploit DB Packet Storm

312402	9.8	CRITICAL Network	tenda	fh1206_firmware	A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument p…	CWE-787 Out-of-bounds Write	CVE-2024-7614	2024-08-22 03:48	2024-08-12	Show	GitHub Exploit DB Packet Storm

312403	9.8	CRITICAL Network	tenda	fh1206_firmware	A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argume…	CWE-787 Out-of-bounds Write	CVE-2024-7613	2024-08-22 03:47	2024-08-12	Show	GitHub Exploit DB Packet Storm

312404	-		-	-	An issue in the downloader.php component of TOSEI online store management system v4.02, v4.03, and v4.04 allows attackers to execute a directory traversal.	-	CVE-2024-43022	2024-08-22 03:35	2024-08-22	Show	GitHub Exploit DB Packet Storm

312405	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.	CWE-352 Origin Validation Error	CVE-2024-42608	2024-08-22 03:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

312406	8.8	HIGH Network	siamonhasan	warehouse_inventory_system	A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	CWE-352 Origin Validation Error	CVE-2024-42579	2024-08-22 03:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

312407	-		-	-	In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not neede…	-	CVE-2024-20083	2024-08-22 03:35	2024-08-14	Show	GitHub Exploit DB Packet Storm

312408	8.8	HIGH Network	ivanti	endpoint_manager_mobile	An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbitrary commands on the underlying operating system of the ap…	CWE-502 Deserialization of Untrusted Data	CVE-2024-36131	2024-08-22 03:35	2024-08-7	Show	GitHub Exploit DB Packet Storm

312409	9.6	CRITICAL Network	koha	koha	Cross Site Scripting vulnerability in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via the additonal-contents.pl component.	CWE-79 Cross-site Scripting	CVE-2024-28740	2024-08-22 03:35	2024-08-7	Show	GitHub Exploit DB Packet Storm

312410	-		-	-	Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Blueto…	-	CVE-2024-40893	2024-08-22 03:15	2024-08-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed