Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252011 4.3 警告 Google - Google Chrome におけるポップアップブロッカーを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3246 2011-01-27 14:37 2010-09-2 Show GitHub Exploit DB Packet Storm
252012 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - Mozilla Firefox および SeaMonkey の Gopher パーサにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3177 2011-01-27 14:26 2010-10-19 Show GitHub Exploit DB Packet Storm
252013 6.9 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - Linux 上で稼働する複数の Mozilla 製品における application-launch スクリプトに関する権限昇格の脆弱性 CWE-DesignError
CVE-2010-3182 2011-01-27 14:24 2010-10-19 Show GitHub Exploit DB Packet Storm
252014 7.6 危険 GNOME Project
レッドハット		 - Evince の TFM フォントパーサにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2643 2011-01-26 15:32 2011-01-5 Show GitHub Exploit DB Packet Storm
252015 7.6 危険 GNOME Project
レッドハット		 - Evince の AFM フォントパーサにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2642 2011-01-26 15:30 2011-01-5 Show GitHub Exploit DB Packet Storm
252016 7.6 危険 GNOME Project
レッドハット		 - Evince の VF フォントパーサにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2641 2011-01-26 15:21 2011-01-5 Show GitHub Exploit DB Packet Storm
252017 7.6 危険 GNOME Project
レッドハット		 - Evince の PK フォントパーサにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2640 2011-01-26 15:10 2011-01-5 Show GitHub Exploit DB Packet Storm
252018 5 警告 MODX - MODx Evolution におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3930 2011-01-26 14:02 2011-01-26 Show GitHub Exploit DB Packet Storm
252019 7.5 危険 MODX - MODx Evolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3929 2011-01-26 14:01 2011-01-26 Show GitHub Exploit DB Packet Storm
252020 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4042 2011-01-26 13:28 2010-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306221 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) NVD-CWE-noinfo
CVE-2024-7976 2024-10-31 01:35 2024-08-22 Show GitHub Exploit DB Packet Storm
306222 7.5 HIGH
Network 		wpchill download_monitor The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7… CWE-862
 Missing Authorization 		CVE-2022-4972 2024-10-31 01:34 2024-10-16 Show GitHub Exploit DB Packet Storm
306223 4.9 MEDIUM
Network 		mayurik petrol_pump_management A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/print.php. The ma… CWE-89
SQL Injection 		CVE-2024-10354 2024-10-31 01:32 2024-10-25 Show GitHub Exploit DB Packet Storm
306224 7.2 HIGH
Network 		oretnom23 online_exam_system A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access… NVD-CWE-noinfo
CVE-2024-10353 2024-10-31 01:21 2024-10-25 Show GitHub Exploit DB Packet Storm
306225 6.1 MEDIUM
Network 		archerirm archer Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a vic… CWE-79
Cross-site Scripting 		CVE-2024-49210 2024-10-31 01:13 2024-10-23 Show GitHub Exploit DB Packet Storm
306226 6.1 MEDIUM
Network 		archerirm archer Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking… CWE-79
Cross-site Scripting 		CVE-2024-49211 2024-10-31 01:08 2024-10-23 Show GitHub Exploit DB Packet Storm
306227 5.4 MEDIUM
Network 		wordpress wordpress WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consist… CWE-79
Cross-site Scripting 		CVE-2022-4973 2024-10-31 00:58 2024-10-16 Show GitHub Exploit DB Packet Storm
306228 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY requires userspace to call write() on ublk char device for f… NVD-CWE-noinfo
CVE-2024-50080 2024-10-31 00:54 2024-10-29 Show GitHub Exploit DB Packet Storm
306229 9.1 CRITICAL
Network 		siemens intermesh_7177_hybrid_2.0_subscriber
intermesh_7707_fire_subscriber_firmware 		A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which… NVD-CWE-noinfo
CVE-2024-47903 2024-10-31 00:54 2024-10-24 Show GitHub Exploit DB Packet Storm
306230 9.8 CRITICAL
Network 		siemens intermesh_7177_hybrid_2.0_subscriber
intermesh_7707_fire_subscriber_firmware 		A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which… CWE-306
Missing Authentication for Critical Function 		CVE-2024-47902 2024-10-31 00:48 2024-10-24 Show GitHub Exploit DB Packet Storm