Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250931 6.5 警告 ヒューレット・パッカード - HP SIM における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3290 2012-03-27 18:42 2010-10-18 Show GitHub Exploit DB Packet Storm
250932 4.3 警告 ヒューレット・パッカード - HP SIM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3289 2012-03-27 18:42 2010-10-18 Show GitHub Exploit DB Packet Storm
250933 6.8 警告 ヒューレット・パッカード - HP SIM におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3288 2012-03-27 18:42 2010-10-18 Show GitHub Exploit DB Packet Storm
250934 8.3 危険 ヒューレット・パッカード - 複数の HP 製品における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3287 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
250935 5 警告 ヒューレット・パッカード - HP SIM における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-3286 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
250936 5 警告 ヒューレット・パッカード - HP OV NNM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-3285 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250937 4.3 警告 ヒューレット・パッカード - HP SMH における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3284 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250938 4.3 警告 ヒューレット・パッカード - HP SMH におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3283 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250939 5.4 警告 Alcatel-Lucent - Alcatel-Lucent OmniVista の HTTP プロキシサービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3281 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
250940 6.9 警告 Alcatel-Lucent - Alcatel-Lucent OmniTouch Contact Center の TSA コンポーネントの CCAgent オプションにおける Contact Center 操作を監視または再設定される脆弱性 CWE-200
情報漏えい 		CVE-2010-3280 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
308621 6.1 MEDIUM
Network 		thimpress learnpress_export_import The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'learnpress_import_form_server' parameter in all version… CWE-79
Cross-site Scripting 		CVE-2024-9609 2024-11-20 06:28 2024-11-15 Show GitHub Exploit DB Packet Storm
308622 9.8 CRITICAL
Network 		1000projects beauty_parlour_management_system A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the a… CWE-89
SQL Injection 		CVE-2024-11258 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm
308623 9.8 CRITICAL
Network 		1000projects beauty_parlour_management_system A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of t… CWE-89
SQL Injection 		CVE-2024-11257 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm
308624 6.1 MEDIUM
Network 		glpi-project glpi GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a … CWE-79
Cross-site Scripting 		CVE-2024-45609 2024-11-20 06:22 2024-11-16 Show GitHub Exploit DB Packet Storm
308625 5.5 MEDIUM
Local 		adobe audition Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by… CWE-125
Out-of-bounds Read 		CVE-2024-49536 2024-11-20 06:21 2024-11-16 Show GitHub Exploit DB Packet Storm
308626 4.3 MEDIUM
Network 		smartwpress music_player_for_elementor The Music Player for Elementor – Audio Player & Podcast Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_mpfe_template() … CWE-862
 Missing Authorization 		CVE-2024-10582 2024-11-20 06:17 2024-11-15 Show GitHub Exploit DB Packet Storm
308627 6.1 MEDIUM
Network 		melapress wp_activity_log The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and … CWE-79
Cross-site Scripting 		CVE-2024-10793 2024-11-20 06:13 2024-11-15 Show GitHub Exploit DB Packet Storm
308628 6.1 MEDIUM
Network 		glpi-project glpi GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link… CWE-79
Cross-site Scripting 		CVE-2024-45610 2024-11-20 06:07 2024-11-16 Show GitHub Exploit DB Packet Storm
308629 5.4 MEDIUM
Network 		glpi-project glpi GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control … CWE-79
Cross-site Scripting 		CVE-2024-45611 2024-11-20 05:57 2024-11-16 Show GitHub Exploit DB Packet Storm
308630 8.1 HIGH
Network 		microsoft windows_server_2022 Windows SMBv3 Server Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-43447 2024-11-20 05:52 2024-11-13 Show GitHub Exploit DB Packet Storm