Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251731 4.3 警告 マイクロソフト - Microsoft Windows におけるネットワーク盗聴を検出される問題 CWE-200
情報漏えい
CVE-2010-4562 2012-02-7 15:44 2012-02-2 Show GitHub Exploit DB Packet Storm
251732 4 警告 Mozilla Foundation - Bugzilla における他のユーザアカウントを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2012-0448 2012-02-6 16:51 2011-12-31 Show GitHub Exploit DB Packet Storm
251733 10 危険 ヒューレット・パッカード - HP Data Protector Media Operations における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4791 2012-02-6 16:44 2012-02-1 Show GitHub Exploit DB Packet Storm
251734 5.1 警告 Mozilla Foundation - Bugzilla の jsonrpc.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-0440 2012-02-6 16:35 2012-01-15 Show GitHub Exploit DB Packet Storm
251735 7.2 危険 アップル - Apple Mac OS X の WebDAV Sharing における権限を取得される脆弱性 CWE-287
不適切な認証
CVE-2011-3463 2012-02-6 16:34 2012-02-2 Show GitHub Exploit DB Packet Storm
251736 5 警告 アップル - Apple Mac OS X の Time Machine における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-3462 2012-02-6 16:34 2012-02-2 Show GitHub Exploit DB Packet Storm
251737 4.3 警告 アップル - Apple Mac OS X の Internet Sharing における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3452 2012-02-6 16:30 2012-02-2 Show GitHub Exploit DB Packet Storm
251738 6.8 警告 アップル - Apple Mac OS X の CoreUI における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-3450 2012-02-6 16:29 2012-02-2 Show GitHub Exploit DB Packet Storm
251739 6.8 警告 アップル - Apple Mac OS X の CoreText における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-3449 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
251740 6.8 警告 アップル - Apple Mac OS X の CoreMedia におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3448 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312071 7.8 HIGH
Local
libarchive libarchive execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. CWE-125
Out-of-bounds Read
CVE-2024-48958 2024-10-12 01:11 2024-10-10 Show GitHub Exploit DB Packet Storm
312072 6.1 MEDIUM
Network
mozilla firefox
thunderbird
firefox_esr
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 1… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2024-9397 2024-10-12 01:07 2024-10-2 Show GitHub Exploit DB Packet Storm
312073 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2024-9869 2024-10-12 00:15 2024-10-12 Show GitHub Exploit DB Packet Storm
312074 4.8 MEDIUM
Network
webkul krayin_crm Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2. CWE-79
Cross-site Scripting
CVE-2024-45932 2024-10-11 22:21 2024-10-8 Show GitHub Exploit DB Packet Storm
312075 9.8 CRITICAL
Network
mecha-cms mecha Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in … CWE-22
Path Traversal
CVE-2024-46446 2024-10-11 22:04 2024-10-8 Show GitHub Exploit DB Packet Storm
312076 6.5 MEDIUM
Network
shilpi client_dashboard This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by includin… NVD-CWE-Other
CVE-2024-47651 2024-10-11 06:01 2024-10-4 Show GitHub Exploit DB Packet Storm
312077 5.4 MEDIUM
Network
prontotools login_logout_shortcode The Login Logout Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitizati… CWE-79
Cross-site Scripting
CVE-2024-9421 2024-10-11 05:59 2024-10-4 Show GitHub Exploit DB Packet Storm
312078 5.4 MEDIUM
Network
acekyd display_medium_posts The Display Medium Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_medium_posts shortcode in all versions up to, and including, 5.0.1 due to insuffici… CWE-79
Cross-site Scripting
CVE-2024-9445 2024-10-11 05:58 2024-10-4 Show GitHub Exploit DB Packet Storm
312079 5.4 MEDIUM
Network
davidartiss code_embed The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's script embed functionality in all versions up to, and including, 2.4 due to insufficient restrictions… CWE-79
Cross-site Scripting
CVE-2024-8804 2024-10-11 05:56 2024-10-4 Show GitHub Exploit DB Packet Storm
312080 6.1 MEDIUM
Network
wpfactory quantity_dynamic_pricing_\&_bulk_discounts_for_woocommerce The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the … CWE-79
Cross-site Scripting
CVE-2024-9384 2024-10-11 05:52 2024-10-4 Show GitHub Exploit DB Packet Storm