Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252351	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web Monitor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2733	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252352	5.8	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web インターフェースにおける任意の Web サイトへリダイレクトされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2732	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252353	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の AES および RC4 の復号化機能における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4212	2010-12-7 16:40	2010-01-12	Show	GitHub Exploit DB Packet Storm

252354	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	MIT Kerberos の asn1_decode_generaltime 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0846	2010-12-7 16:39	2009-04-7	Show	GitHub Exploit DB Packet Storm

252355	5	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の spnego_gss_accept_sec_context 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0845	2010-12-7 16:38	2009-03-27	Show	GitHub Exploit DB Packet Storm

252356	5.8	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の SPNEGO 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0844	2010-12-7 16:38	2009-04-7	Show	GitHub Exploit DB Packet Storm

252357	4	警告	Pidgin レッドハット	-	Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3711	2010-12-7 15:44	2010-05-12	Show	GitHub Exploit DB Packet Storm

252358	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3336	2010-12-6 16:51	2010-11-9	Show	GitHub Exploit DB Packet Storm

252359	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2573	2010-12-6 16:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

252360	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3337	2010-12-6 15:44	2010-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
308851	5.4	MEDIUM Network	allprices	beauty	The Beauty theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tpl_featured_cat_id’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization …	CWE-79 Cross-site Scripting	CVE-2024-5884	2024-09-27 05:13	2024-09-14	Show	GitHub Exploit DB Packet Storm

308852	8.8	HIGH Network	xwp	stream	The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is due to missing or incorrect nonce validation on the network_options_ac…	CWE-352 Origin Validation Error	CVE-2024-7423	2024-09-27 05:08	2024-09-14	Show	GitHub Exploit DB Packet Storm

308853	6.1	MEDIUM Network	slicewp	affiliate_program_suite	The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in…	CWE-79 Cross-site Scripting	CVE-2024-8714	2024-09-27 05:06	2024-09-14	Show	GitHub Exploit DB Packet Storm

308854	6.1	MEDIUM Network	lucasstad	lucas_string_replace	The Lucas String Replace plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and includ…	CWE-79 Cross-site Scripting	CVE-2024-8734	2024-09-27 04:30	2024-09-14	Show	GitHub Exploit DB Packet Storm

308855	5.4	MEDIUM Network	khromov	email_obfuscate_shortcode	The Email Obfuscate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email-obfuscate' shortcode in all versions up to, and including, 2.0 due to insuffici…	CWE-79 Cross-site Scripting	CVE-2024-8747	2024-09-27 04:23	2024-09-14	Show	GitHub Exploit DB Packet Storm

308856	6.1	MEDIUM Network	kubiq	pdf_thumbnail_generator	The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and inc…	CWE-79 Cross-site Scripting	CVE-2024-8737	2024-09-27 04:18	2024-09-14	Show	GitHub Exploit DB Packet Storm

308857	4.3	MEDIUM Network	sentry	sentry	Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-45606	2024-09-27 04:16	2024-09-18	Show	GitHub Exploit DB Packet Storm

308858	4.3	MEDIUM Network	sentry	sentry	Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-45605	2024-09-27 04:14	2024-09-18	Show	GitHub Exploit DB Packet Storm

308859	9.8	CRITICAL Network	apexsoftcell	ld_geo ld_dp_back_office	This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability b…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2024-47088	2024-09-27 04:12	2024-09-19	Show	GitHub Exploit DB Packet Storm

308860	6.5	MEDIUM Network	apexsoftcell	ld_geo ld_dp_back_office	This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by …	CWE-354 Improper Validation of Integrity Check Value	CVE-2024-47089	2024-09-27 04:09	2024-09-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed