Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254681	7.5	危険	The PHP Group LibGD project サイバートラスト株式会社レッドハット	-	PHP および GD Graphics Library の _gdGetColors 関数におけるバッファオーバーフローの脆弱性	CWE-Other その他	CVE-2009-3546	2010-02-3 14:34	2009-10-19	Show	GitHub Exploit DB Packet Storm

254682	6.8	警告	GNU Project XEmacs サイバートラスト株式会社	-	Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性	CWE-DesignError	CVE-2008-2142	2010-02-2 11:43	2008-05-12	Show	GitHub Exploit DB Packet Storm

254683	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4370	2010-02-2 11:43	2009-12-16	Show	GitHub Exploit DB Packet Storm

254684	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4369	2010-02-2 11:42	2009-12-16	Show	GitHub Exploit DB Packet Storm

254685	7.5	危険	日立	-	Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-02-2 11:42	2009-12-22	Show	GitHub Exploit DB Packet Storm

254686	4.3	警告	VMware	-	複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3731	2010-02-1 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

254687	10	危険	サイバートラスト株式会社 Linux	-	Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2008-1673	2010-02-1 11:51	2008-06-10	Show	GitHub Exploit DB Packet Storm

254688	10	危険	ヒューレット・パッカード	-	複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-3027	2010-02-1 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

254689	9.3	危険	KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社レッドハット	-	Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4035	2010-01-29 09:54	2009-12-16	Show	GitHub Exploit DB Packet Storm

254690	7.8	危険	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3987	2010-01-29 09:54	2009-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312111	9.8	CRITICAL Network	oretnom23	clinic\'s_patient_management_system	A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patient_name of the file patients.php…	CWE-89 SQL Injection	CVE-2024-7454	2024-09-7 21:56	2024-08-4	Show	GitHub Exploit DB Packet Storm

312112	9.8	CRITICAL Network	onesoftnet	sudobot	SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the `-config` command in versions prior to 9.26.7. Anyone is theoretically able to update any configuration of …	CWE-862 Missing Authorization	CVE-2024-45307	2024-09-7 10:34	2024-09-4	Show	GitHub Exploit DB Packet Storm

312113	6.1	MEDIUM Network	xiebruce	picuploader	A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injec…	CWE-79 Cross-site Scripting	CVE-2024-44796	2024-09-7 08:35	2024-08-27	Show	GitHub Exploit DB Packet Storm

312114	8.8	HIGH Network	roxy-wi	roxy-wi	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. An OS Command Injection vulnerability allows any authenticated user on the application to execute arbitrary code…	CWE-78 OS Command	CVE-2024-43804	2024-09-7 07:57	2024-08-30	Show	GitHub Exploit DB Packet Storm

312115	8.1	HIGH Network	getkirby	kirby	Kirby is a CMS targeting designers and editors. Kirby allows to restrict the permissions of specific user roles. Users of that role can only perform permitted actions. Permissions for creating and de…	CWE-863 Incorrect Authorization	CVE-2024-41964	2024-09-7 07:56	2024-08-30	Show	GitHub Exploit DB Packet Storm

312116	5.4	MEDIUM Network	seacms	seacms	A cross-site scripting (XSS) vulnerability in the component admin_ads.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ad descript…	CWE-79 Cross-site Scripting	CVE-2024-44919	2024-09-7 07:54	2024-08-30	Show	GitHub Exploit DB Packet Storm

312117	9.8	CRITICAL Network	deltaww	dtn_soft	Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vulnerability.	CWE-502 Deserialization of Untrusted Data	CVE-2024-8255	2024-09-7 07:53	2024-08-30	Show	GitHub Exploit DB Packet Storm

312118	7.5	HIGH Network	wolfssl	wolfssl	In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and le…	CWE-125 Out-of-bounds Read	CVE-2024-5991	2024-09-7 07:51	2024-08-28	Show	GitHub Exploit DB Packet Storm

312119	9.8	CRITICAL Network	hp	security_manager	HP Security Manager is potentially vulnerable to Remote Code Execution as a result of code vulnerability within the product's solution open-source libraries.	NVD-CWE-noinfo	CVE-2024-7720	2024-09-7 07:33	2024-08-28	Show	GitHub Exploit DB Packet Storm

312120	6.1	MEDIUM Network	gazelle_project	gazelle	A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inj…	CWE-79 Cross-site Scripting	CVE-2024-44797	2024-09-7 07:27	2024-08-27	Show	GitHub Exploit DB Packet Storm