Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252751 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat の CoolType.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2862 2010-08-31 16:41 2010-08-5 Show GitHub Exploit DB Packet Storm
252752 5 警告 無料素材屋 Moo - moobbs2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2365 2010-08-31 11:02 2010-08-31 Show GitHub Exploit DB Packet Storm
252753 5 警告 無料素材屋 Moo - moobbs におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2364 2010-08-31 11:01 2010-08-31 Show GitHub Exploit DB Packet Storm
252754 5.1 警告 GNU Project
レッドハット		 - GnuPG の kbx/keybox-blob.c における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2547 2010-08-30 19:01 2010-07-23 Show GitHub Exploit DB Packet Storm
252755 - - Invensys - Wonderware Archestra ConfigurationAccessComponent ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - - 2010-08-30 19:01 2010-08-5 Show GitHub Exploit DB Packet Storm
252756 7.8 危険 シスコシステムズ - 複数の Cisco 製品の IKE におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2817 2010-08-27 16:04 2010-08-4 Show GitHub Exploit DB Packet Storm
252757 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances の SIP 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2816 2010-08-27 16:04 2010-08-4 Show GitHub Exploit DB Packet Storm
252758 7.8 危険 シスコシステムズ - 複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2815 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
252759 7.8 危険 シスコシステムズ - 複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2814 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
252760 7.8 危険 シスコシステムズ - 複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1581 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305831 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause the suspend notifier to be regis… NVD-CWE-noinfo
CVE-2022-48982 2024-10-26 03:12 2024-10-22 Show GitHub Exploit DB Packet Storm
305832 - - - In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution … - CVE-2024-44098 2024-10-26 02:35 2024-10-25 Show GitHub Exploit DB Packet Storm
305833 - - - Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them t… - CVE-2023-48082 2024-10-26 02:15 2024-10-15 Show GitHub Exploit DB Packet Storm
305834 8.1 HIGH
Network 		google chrome Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) NVD-CWE-noinfo
CVE-2024-10229 2024-10-26 02:04 2024-10-23 Show GitHub Exploit DB Packet Storm
305835 9.8 CRITICAL
Network 		keith-cullen freecoap Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a s… CWE-476
 NULL Pointer Dereference 		CVE-2024-40493 2024-10-26 02:01 2024-10-23 Show GitHub Exploit DB Packet Storm
305836 8.8 HIGH
Network 		google chrome Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion 		CVE-2024-10231 2024-10-26 02:01 2024-10-23 Show GitHub Exploit DB Packet Storm
305837 9.8 CRITICAL
Network 		janobe online_complaint_site SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component. CWE-89
SQL Injection 		CVE-2024-44812 2024-10-26 01:56 2024-10-23 Show GitHub Exploit DB Packet Storm
305838 5.0 MEDIUM
Local 		loan_management_system_project loan_management_system itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in … CWE-79
Cross-site Scripting 		CVE-2024-48415 2024-10-26 01:55 2024-10-23 Show GitHub Exploit DB Packet Storm
305839 9.8 CRITICAL
Network 		properfraction profilepress The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.11.1. This is due to insufficient verification on the user being returned by t… CWE-287
Improper Authentication 		CVE-2024-9947 2024-10-26 01:53 2024-10-23 Show GitHub Exploit DB Packet Storm
305840 4.8 MEDIUM
Network 		tuzitio camaleon_cms Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field. CWE-79
Cross-site Scripting 		CVE-2024-48652 2024-10-26 01:51 2024-10-23 Show GitHub Exploit DB Packet Storm