Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251951	9.3	危険	アップルレッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1807	2011-02-4 14:33	2010-09-7	Show	GitHub Exploit DB Packet Storm

251952	9.3	危険	アップルレッドハット	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1815	2011-02-4 14:32	2010-09-8	Show	GitHub Exploit DB Packet Storm

251953	9.3	危険	アップルレッドハット	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1814	2011-02-4 14:30	2010-09-8	Show	GitHub Exploit DB Packet Storm

251954	9.3	危険	アップルレッドハット	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1812	2011-02-4 14:29	2010-09-8	Show	GitHub Exploit DB Packet Storm

251955	9.3	危険	アップル Google レッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1780	2011-02-4 14:28	2010-07-30	Show	GitHub Exploit DB Packet Storm

251956	5.8	警告	アップルレッドハット	-	Apple Safari の WebKit における DNS 先読み設定を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3813	2011-02-4 14:26	2010-11-22	Show	GitHub Exploit DB Packet Storm

251957	9.3	危険	アップルレッドハット	-	Apple Safari の WebKit における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3812	2011-02-4 14:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

251958	7.5	危険	Objectivity	-	Objectivity/DB 管理用ツールに認証不備の問題	CWE-287 不適切な認証	CVE-2011-0489	2011-02-4 14:16	2011-01-14	Show	GitHub Exploit DB Packet Storm

251959	6.8	警告	ICQ	-	ICQ 7のアップデートに検証不備の問題	CWE-94 コード・インジェクション	CVE-2011-0487	2011-02-4 14:14	2011-01-14	Show	GitHub Exploit DB Packet Storm

251960	-	-	Google	-	Google Chrome における複数の脆弱性	-	-	2011-02-4 14:11	2011-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3211	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS MetaMax metamax allows PHP Local File Inclusion.This issue affects …	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-32500	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3212	8.1	HIGH Network	-	-	Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en CreativeWS MetaMax metamax permite la Inclusión …	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-32500	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3213	7.1	HIGH Network	-	-	Missing Authorization vulnerability in wp-configurator WP Configurator Pro wp-configurator-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Configurat…	CWE-862 Missing Authorization	CVE-2026-32501	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3214	7.1	HIGH Network	-	-	Vulnerabilidad de autorización faltante en wp-configurator WP Configurator Pro wp-configurator-pro permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este proble…	CWE-862 Missing Authorization	CVE-2026-32501	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3215	9.8	CRITICAL Network	-	-	Deserialization of Untrusted Data vulnerability in Select-Themes Borgholm borgholm-marketing-agency-theme allows Object Injection.This issue affects Borgholm: from n/a through < 1.6.	CWE-502 Deserialization of Untrusted Data	CVE-2026-32502	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3216	9.8	CRITICAL Network	-	-	Vulnerabilidad de deserialización de datos no confiables en Select-Themes Borgholm borgholm-marketing-agency-theme permite la inyección de objetos. Este problema afecta a Borgholm: desde n/a hasta &l…	CWE-502 Deserialization of Untrusted Data	CVE-2026-32502	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3217	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Trendustry trendustry allows PHP Local File Inclusion.This issue af…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-32503	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3218	8.1	HIGH Network	-	-	Vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en el programa PHP ('inclusión remota de ficheros PHP') en CreativeWS Trendustry trendustry permite la i…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-32503	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3219	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS VintWood vintwood allows PHP Local File Inclusion.This issue affect…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-32504	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3220	8.1	HIGH Network	-	-	Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'Inclusión remota de ficheros PHP') en CreativeWS VintWood vintwood permite la Inclu…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-32504	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed