Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252541 4.7 警告 サイバートラスト株式会社
VMware
Linux
レッドハット		 - x86_64 プラットフォーム上の Linux kernel の load_elf_binary 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0307 2011-03-1 14:38 2010-03-16 Show GitHub Exploit DB Packet Storm
252542 4.6 警告 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux Kernel の do_pages_move 関数におけるカーネルメモリの情報が漏えいする脆弱性 CWE-Other
その他 		CVE-2010-0415 2011-03-1 14:35 2010-02-17 Show GitHub Exploit DB Packet Storm
252543 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の ext4_decode_error 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4308 2011-03-1 14:34 2009-12-13 Show GitHub Exploit DB Packet Storm
252544 7.8 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux Kernel の SCTP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0008 2011-03-1 14:33 2010-03-16 Show GitHub Exploit DB Packet Storm
252545 7.8 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の CIFS 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2248 2011-03-1 14:31 2010-04-26 Show GitHub Exploit DB Packet Storm
252546 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の vidplin.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4393 2011-02-28 16:33 2011-01-27 Show GitHub Exploit DB Packet Storm
252547 7.6 危険 サイバートラスト株式会社
Pango.org
レッドハット		 - Pango の pango_ft2_font_render_box_glyph 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0020 2011-02-28 16:30 2011-01-24 Show GitHub Exploit DB Packet Storm
252548 6.8 警告 Lomtec - Lomtec ActiveWeb Professional 3.0 CMS における任意のファイルをアップロードおよび実行可能な脆弱性 CWE-Other
その他 		CVE-2011-0678 2011-02-28 16:25 2011-01-26 Show GitHub Exploit DB Packet Storm
252549 4.9 警告 サイバートラスト株式会社
VMware
Xen プロジェクト
レッドハット		 - Xen の arch/ia64/xen/faults.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2070 2011-02-28 14:55 2010-06-16 Show GitHub Exploit DB Packet Storm
252550 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の Bluetooth ソケットにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1084 2011-02-28 14:54 2010-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310001 5.4 MEDIUM
Network 		wpmet elementskit_elementor_addons The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all versions up to, and including, 3.2.7 due to insufficient input … CWE-79
Cross-site Scripting 		CVE-2024-8546 2024-10-3 03:56 2024-09-25 Show GitHub Exploit DB Packet Storm
310002 5.3 MEDIUM
Network 		mycred mycred The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress… CWE-862
 Missing Authorization 		CVE-2024-8658 2024-10-3 03:36 2024-09-25 Show GitHub Exploit DB Packet Storm
310003 6.1 MEDIUM
Network 		ninjaforms ninja_forms The Ninja Forms Contact Form plugin for WordPress is vulnerable to Reflected Self-Based Cross-Site Scripting via the 'Referer' header in all versions up to, and including, 3.8.15 due to insufficient … CWE-79
Cross-site Scripting 		CVE-2024-3866 2024-10-3 03:26 2024-09-25 Show GitHub Exploit DB Packet Storm
310004 8.8 HIGH
Network 		wclovers frontend_manager_for_woocommerce_along_with_bookings_subscription_listings_compatible The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incl… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-8290 2024-10-3 03:23 2024-09-25 Show GitHub Exploit DB Packet Storm
310005 5.4 MEDIUM
Network 		braginteractive material_design_icons The Material Design Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mdi-icon shortcode in all versions up to, and including, 0.0.5 due to insufficient input s… CWE-79
Cross-site Scripting 		CVE-2024-9024 2024-10-3 03:02 2024-09-25 Show GitHub Exploit DB Packet Storm
310006 4.8 MEDIUM
Network 		technowich wp_ulike The WP ULike WordPress plugin before 4.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even… CWE-79
Cross-site Scripting 		CVE-2024-7878 2024-10-3 02:41 2024-09-25 Show GitHub Exploit DB Packet Storm
310007 6.4 MEDIUM
Local 		amd epyc_8024pn_firmware
epyc_8024p_firmware
epyc_8124pn_firmware
epyc_8124p_firmware
epyc_8224pn_firmware
epyc_8224p_firmware
epyc_8324pn_firmware
epyc_8324p_firmware
epyc_8434pn… 		A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrar… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2023-20578 2024-10-3 02:35 2024-08-14 Show GitHub Exploit DB Packet Storm
310008 4.3 MEDIUM
Network 		wpplugin easy_paypal_events The Easy PayPal Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the wpeeve… CWE-352
 Origin Validation Error 		CVE-2024-8476 2024-10-3 02:31 2024-09-25 Show GitHub Exploit DB Packet Storm
310009 8.8 HIGH
Network 		supsystic slider
social_share_buttons 		Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons … CWE-862
 Missing Authorization 		CVE-2024-47330 2024-10-3 02:26 2024-09-26 Show GitHub Exploit DB Packet Storm
310010 4.3 MEDIUM
Network 		themehunk easy_mega_menu_plugin The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via AJAX in all versions up… CWE-862
 Missing Authorization 		CVE-2024-8434 2024-10-3 02:25 2024-09-25 Show GitHub Exploit DB Packet Storm