Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252151	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-1214	2011-01-6 14:48	2010-07-20	Show	GitHub Exploit DB Packet Storm

252152	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1211	2011-01-6 14:47	2010-07-20	Show	GitHub Exploit DB Packet Storm

252153	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の NodeIterator 実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1209	2011-01-6 14:46	2010-07-20	Show	GitHub Exploit DB Packet Storm

252154	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の DOM 実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1208	2011-01-6 14:45	2010-07-20	Show	GitHub Exploit DB Packet Storm

252155	5.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の JavaScript の実装における選択したキーストロークを送信される脆弱性	CWE-200 情報漏えい	CVE-2010-1125	2011-01-6 14:43	2010-06-22	Show	GitHub Exploit DB Packet Storm

252156	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-3772	2011-01-5 15:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

252157	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey における任意の JavaScript コードを実行される脆弱性	CWE-DesignError	CVE-2010-3771	2011-01-5 15:39	2010-12-9	Show	GitHub Exploit DB Packet Storm

252158	9.3	危険	Mozilla Foundation	-	Windows 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3769	2011-01-5 15:21	2010-12-9	Show	GitHub Exploit DB Packet Storm

252159	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-119 CWE-noinfo	CVE-2010-3778	2011-01-5 15:12	2010-12-9	Show	GitHub Exploit DB Packet Storm

252160	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1202	2011-01-5 14:44	2010-06-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307491	8.1	HIGH Network	-	-	The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.4. This is due to the appp_reset_passwo…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2024-9305	2024-10-16 11:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

307492	9.8	CRITICAL Network	-	-	The UltimateAI plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.8.3. This is due to insufficient verification on the user being supplied in the 'ultimat…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2024-9105	2024-10-16 11:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

307493	5.6	MEDIUM Network	-	-	The UltimateAI plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.3. This is due to the improper empty value check and a missing default activated v…	CWE-703 Improper Check or Handling of Exceptional Conditions	CVE-2024-9104	2024-10-16 11:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

307494	6.1	MEDIUM Network	-	-	The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in al…	CWE-79 Cross-site Scripting	CVE-2024-8787	2024-10-16 11:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

307495	7.3	HIGH Local	microsoft	windows_server_2016 windows_server_2019 windows_server_2022 windows_11_22h2 windows_11_21h2 windows_10_22h2 windows_10_21h2 windows_10_1809 windows_10_1607 windows_11_23h2<…	Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated v…	NVD-CWE-Other	CVE-2024-38202	2024-10-16 11:15	2024-08-8	Show	GitHub Exploit DB Packet Storm

307496	-		apple	safari	Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.	CWE-399 Resource Management Errors	CVE-2010-0048	2024-10-16 06:35	2010-03-15	Show	GitHub Exploit DB Packet Storm

307497	-		apple	safari	Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to "HTML obj…	CWE-399 Resource Management Errors	CVE-2010-0047	2024-10-16 06:35	2010-03-15	Show	GitHub Exploit DB Packet Storm

307498	7.8	HIGH Local	adobe	incopy	InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…	CWE-190 Integer Overflow or Wraparound	CVE-2024-41858	2024-10-16 05:51	2024-08-14	Show	GitHub Exploit DB Packet Storm

307499	6.1	MEDIUM Network	lemonldap-ng	lemonldap\	A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML into the login page via a username if userControl has been set…	CWE-79 Cross-site Scripting	CVE-2024-48933	2024-10-16 03:56	2024-10-10	Show	GitHub Exploit DB Packet Storm

307500	9.8	CRITICAL Network	internet-formation	wp-advanced-search	The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks	CWE-89 SQL Injection	CVE-2024-9796	2024-10-16 03:46	2024-10-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed