Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251471 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0516 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
251472 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0515 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
251473 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0514 2010-04-15 18:38 2010-03-29 Show GitHub Exploit DB Packet Storm
251474 6.8 警告 アップル - Apple Mac OS X の PS Normalizer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0513 2010-04-15 18:38 2010-03-29 Show GitHub Exploit DB Packet Storm
251475 9.3 危険 アップル - Apple Mac OS X の アカウント環境設定の実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0512 2010-04-15 18:38 2010-03-29 Show GitHub Exploit DB Packet Storm
251476 5 警告 アップル - Apple Mac OS X の Podcast プロデューサーにおけるワークフローにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0511 2010-04-15 18:38 2010-03-29 Show GitHub Exploit DB Packet Storm
251477 9 危険 アップル - Apple Mac OS X のパスワードサーバにおけるログインアクセスを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-0510 2010-04-15 18:37 2010-03-29 Show GitHub Exploit DB Packet Storm
251478 7.2 危険 アップル - Apple Mac OS X の SFLServer における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0509 2010-04-15 18:37 2010-03-29 Show GitHub Exploit DB Packet Storm
251479 7.8 危険 アップル - Apple Mac OS X の Mail における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2010-0525 2010-04-15 18:36 2010-03-29 Show GitHub Exploit DB Packet Storm
251480 4 警告 アップル
サイバートラスト株式会社
MySQL AB
レッドハット
- MySQL の mysqld におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2009-4019 2010-04-15 18:16 2009-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249311 6.1 MEDIUM
Network
elenazhyvohliad ucat Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Elena Zhyvohliad uCAT – Next Story allows Reflected XSS.This issue affects uCAT – Next Sto… CWE-79
Cross-site Scripting
CVE-2024-49663 2024-11-2 03:55 2024-10-29 Show GitHub Exploit DB Packet Storm
249312 5.4 MEDIUM
Network
nervythemes local_business_addons_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NervyThemes Local Business Addons For Elementor allows Stored XSS.This issue affects Local… CWE-79
Cross-site Scripting
CVE-2024-49667 2024-11-2 03:48 2024-10-29 Show GitHub Exploit DB Packet Storm
249313 4.3 MEDIUM
Network
giuliopanda bulk_images_optimizer The Bulk images optimizer: Resize, optimize, convert to webp, rename … plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_configura… CWE-862
 Missing Authorization
CVE-2024-9361 2024-11-2 03:46 2024-10-18 Show GitHub Exploit DB Packet Storm
249314 9.8 CRITICAL
Network
zte wrtm326_firmware The wireless router WRTM326 from SECOM does not properly validate a specific parameter. An unauthenticated remote attacker could execute arbitrary system commands by sending crafted requests. CWE-78
OS Command 
CVE-2024-10119 2024-11-2 03:40 2024-10-18 Show GitHub Exploit DB Packet Storm
249315 6.5 MEDIUM
Network
fabianros blood_bank_management_system A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.p… CWE-352
 Origin Validation Error
CVE-2024-10448 2024-11-2 03:26 2024-10-28 Show GitHub Exploit DB Packet Storm
249316 4.3 MEDIUM
Network
infinite-scroll infinite-scroll The Infinite-Scroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.2. This is due to missing or incorrect nonce validation on the process_a… CWE-352
 Origin Validation Error
CVE-2024-10040 2024-11-2 03:26 2024-10-18 Show GitHub Exploit DB Packet Storm
249317 6.5 MEDIUM
Network
cisco secure_firewall_management_center A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an af… CWE-89
SQL Injection
CVE-2024-20472 2024-11-2 03:22 2024-10-24 Show GitHub Exploit DB Packet Storm
249318 6.5 MEDIUM
Network
cisco secure_firewall_management_center A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an af… CWE-89
SQL Injection
CVE-2024-20471 2024-11-2 03:16 2024-10-24 Show GitHub Exploit DB Packet Storm
249319 6.5 MEDIUM
Network
cisco anyconnect_secure_mobility_client
secure_client
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secur… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2024-20474 2024-11-2 03:14 2024-10-24 Show GitHub Exploit DB Packet Storm
249320 8.8 HIGH
Network
grafana grafana The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, le… CWE-77
Command Injection
CVE-2024-9264 2024-11-2 03:14 2024-10-18 Show GitHub Exploit DB Packet Storm