Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251051	5	警告	IBM アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカードマイクロソフトオラクル OpenOffice.org Project レッドハット	-	XML 署名の検証において認証回避が可能な問題	CWE-DesignError	CVE-2009-0217	2010-07-22 17:52	2009-07-15	Show	GitHub Exploit DB Packet Storm

251052	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2212	2010-07-21 16:31	2010-06-29	Show	GitHub Exploit DB Packet Storm

251053	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2211	2010-07-21 16:31	2010-06-29	Show	GitHub Exploit DB Packet Storm

251054	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2210	2010-07-21 16:31	2010-06-29	Show	GitHub Exploit DB Packet Storm

251055	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2209	2010-07-21 16:30	2010-06-29	Show	GitHub Exploit DB Packet Storm

251056	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2208	2010-07-21 16:30	2010-06-29	Show	GitHub Exploit DB Packet Storm

251057	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2207	2010-07-21 16:30	2010-06-29	Show	GitHub Exploit DB Packet Storm

251058	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の AcroForm.api における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-2206	2010-07-21 16:29	2010-06-29	Show	GitHub Exploit DB Packet Storm

251059	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-94 CWE-Other	CVE-2010-2205	2010-07-21 16:29	2010-06-29	Show	GitHub Exploit DB Packet Storm

251060	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-2204	2010-07-21 16:28	2010-06-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249061	5.4	MEDIUM Network	nicheaddons	restaurant_\&_cafe_addon_for_elementor	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Stored XSS.This issue affects Res…	CWE-79 Cross-site Scripting	CVE-2024-51581	2024-11-14 05:49	2024-11-10	Show	GitHub Exploit DB Packet Storm

249062	7.2	HIGH Network	salesagility	suitecrm	SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM relies on the blacklist of functions/methods to prevent installation of malicious ML…	NVD-CWE-noinfo	CVE-2024-49774	2024-11-14 05:40	2024-11-6	Show	GitHub Exploit DB Packet Storm

249063	8.8	HIGH Network	zohocorp	manageengine_admanager_plus	Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.	NVD-CWE-noinfo	CVE-2024-24409	2024-11-14 05:35	2024-11-8	Show	GitHub Exploit DB Packet Storm

249064	5.4	MEDIUM Network	mycred	mycred	The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress…	CWE-79 Cross-site Scripting	CVE-2024-10187	2024-11-14 05:31	2024-11-8	Show	GitHub Exploit DB Packet Storm

249065	6.5	MEDIUM Network	salesagility	suitecrm	SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Poor input validation in export allows authenticated user do a SQL injection attack. User-con…	CWE-89 SQL Injection	CVE-2024-49773	2024-11-14 05:29	2024-11-6	Show	GitHub Exploit DB Packet Storm

249066	8.1	HIGH Network	zohocorp	manageengine_sharepoint_manager_plus	Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.	CWE-611 XXE	CVE-2024-10839	2024-11-14 05:19	2024-11-8	Show	GitHub Exploit DB Packet Storm

249067	8.8	HIGH Network	salesagility	suitecrm	SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In SuiteCRM versions 7.14.4, poor input validation allows authenticated user do a SQL injecti…	CWE-89 SQL Injection	CVE-2024-49772	2024-11-14 05:19	2024-11-6	Show	GitHub Exploit DB Packet Storm

249068	8.8	HIGH Network	salesagility	suitecrm	SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. User input is not validated and is written to the filesystem. The ParserLabel::addLabels() fu…	NVD-CWE-noinfo	CVE-2024-50333	2024-11-14 05:10	2024-11-6	Show	GitHub Exploit DB Packet Storm

249069	5.4	MEDIUM Network	brainstormforce	elementor_header_\&_footer_builder	The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient …	CWE-79 Cross-site Scripting	CVE-2024-10325	2024-11-14 05:01	2024-11-8	Show	GitHub Exploit DB Packet Storm

249070	7.5	HIGH Network	talyssonoc	commonregexjs	CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of p…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2020-26305	2024-11-14 05:00	2024-10-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed