Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252241 4.3 警告 アップル - Apple iOS のプロファイルを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3827 2010-12-20 14:11 2010-11-26 Show GitHub Exploit DB Packet Storm
252242 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3795 2010-12-17 14:29 2010-11-16 Show GitHub Exploit DB Packet Storm
252243 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3794 2010-12-17 14:29 2010-11-16 Show GitHub Exploit DB Packet Storm
252244 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3793 2010-12-17 14:28 2010-11-16 Show GitHub Exploit DB Packet Storm
252245 6.8 警告 アップル - Apple Mac OS X の QuickTime における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3792 2010-12-17 14:27 2010-11-16 Show GitHub Exploit DB Packet Storm
252246 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3791 2010-12-17 13:59 2010-11-16 Show GitHub Exploit DB Packet Storm
252247 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3789 2010-12-17 13:48 2010-11-16 Show GitHub Exploit DB Packet Storm
252248 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3788 2010-12-17 13:46 2010-11-16 Show GitHub Exploit DB Packet Storm
252249 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3787 2010-12-17 13:45 2010-11-16 Show GitHub Exploit DB Packet Storm
252250 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3826 2010-12-17 12:47 2010-11-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
304431 6.1 MEDIUM
Network 		westguardsolutions ws_form The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping … CWE-79
Cross-site Scripting 		CVE-2024-10647 2024-11-9 06:20 2024-11-6 Show GitHub Exploit DB Packet Storm
304432 4.3 MEDIUM
Network 		tumult tumult_hype_animations The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hypeanimations_getcontent function in all versions up to, and inc… CWE-862
 Missing Authorization 		CVE-2024-10543 2024-11-9 06:19 2024-11-6 Show GitHub Exploit DB Packet Storm
304433 5.3 MEDIUM
Network 		martinvalchev video_gallery_for_woocommerce The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the remove_unused_thumbnails() function in all versions … CWE-862
 Missing Authorization 		CVE-2024-10535 2024-11-9 06:19 2024-11-6 Show GitHub Exploit DB Packet Storm
304434 8.1 HIGH
Network 		heateor social_login The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.1.35. This is due to insufficient verification on the user being… NVD-CWE-noinfo
CVE-2024-10020 2024-11-9 06:19 2024-11-6 Show GitHub Exploit DB Packet Storm
304435 5.3 MEDIUM
Network 		theinnovs eleforms The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all v… CWE-862
 Missing Authorization 		CVE-2024-6626 2024-11-9 06:18 2024-11-6 Show GitHub Exploit DB Packet Storm
304436 9.8 CRITICAL
Network 		fortinet fortimanager_cloud
fortimanager 		A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through… CWE-306
Missing Authentication for Critical Function 		CVE-2024-47575 2024-11-9 06:16 2024-10-24 Show GitHub Exploit DB Packet Storm
304437 9.8 CRITICAL
Network 		websiteinwp blogpoet Missing Authorization vulnerability in WebsiteinWP Blogpoet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blogpoet: from n/a through 1.0.3. CWE-862
 Missing Authorization 		CVE-2024-43998 2024-11-9 06:11 2024-11-2 Show GitHub Exploit DB Packet Storm
304438 8.8 HIGH
Network 		geekcodelab login_as_users Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login As Users: from n/a through 1.4.3. CWE-862
 Missing Authorization 		CVE-2024-43982 2024-11-9 06:11 2024-11-2 Show GitHub Exploit DB Packet Storm
304439 8.8 HIGH
Network 		ayecode geodirectory Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GeoDirectory: fr… CWE-862
 Missing Authorization 		CVE-2024-43981 2024-11-9 06:10 2024-11-2 Show GitHub Exploit DB Packet Storm
304440 8.8 HIGH
Network 		combodo itop Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests on behalf of the server, from a low privileged user. The user portal form manage… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-51740 2024-11-9 06:09 2024-11-6 Show GitHub Exploit DB Packet Storm