Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252911	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2201	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

252912	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2168	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

252913	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1295	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

252914	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

252915	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

252916	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

252917	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

252918	1.9	注意	レッドハットサイバートラスト株式会社ターボリナックス Samba Project	-	Samba の mount.cifs における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2948	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

252919	6	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	Apple Mac OS の SMB サブシステムにおけるファイル共有の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2813	2010-07-20 18:01	2009-09-10	Show	GitHub Exploit DB Packet Storm

252920	5	警告	S2 Security	-	S2 Netbox に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2466	2010-07-16 18:41	2010-06-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304101	4.3	MEDIUM Network	themeum	wp_crowdfunding	Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10.	CWE-862 Missing Authorization	CVE-2024-43937	2024-11-9 00:57	2024-11-2	Show	GitHub Exploit DB Packet Storm

304102	5.3	MEDIUM Network	combodo	itop	Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a valid account. As a fix the sentence displ…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-51739	2024-11-9 00:56	2024-11-6	Show	GitHub Exploit DB Packet Storm

304103	4.1	MEDIUM Network	nvidia	nvidia_container_toolkit nvidia_gpu_operator	NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name …	NVD-CWE-Other	CVE-2024-0134	2024-11-9 00:53	2024-11-6	Show	GitHub Exploit DB Packet Storm

304104	6.1	MEDIUM Network	hashicorp	consul	A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and …	CWE-79 Cross-site Scripting	CVE-2024-10086	2024-11-9 00:49	2024-10-31	Show	GitHub Exploit DB Packet Storm

304105	4.3	MEDIUM Network	hcltech	connections	HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entit…	NVD-CWE-noinfo	CVE-2024-30106	2024-11-9 00:43	2024-10-29	Show	GitHub Exploit DB Packet Storm

304106	6.1	MEDIUM Network	elabftw	elabftw	eLabFTW is an open source electronic lab notebook for research labs. A vulnerability in versions prior to 5.1.5 allows an attacker to inject arbitrary HTML tags in the pages: "experiments.php" (show …	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2024-47826	2024-11-9 00:41	2024-10-15	Show	GitHub Exploit DB Packet Storm

304107	7.5	HIGH Network	vercel	next.js	Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a …	CWE-674 Uncontrolled Recursion	CVE-2024-47831	2024-11-9 00:39	2024-10-15	Show	GitHub Exploit DB Packet Storm

304108	6.1	MEDIUM Network	forgerock	access_management	An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under…	CWE-601 Open Redirect	CVE-2024-25566	2024-11-9 00:38	2024-10-30	Show	GitHub Exploit DB Packet Storm

304109	-		-	-	The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to p…	-	CVE-2024-7982	2024-11-9 00:35	2024-11-8	Show	GitHub Exploit DB Packet Storm

304110	6.5	MEDIUM Network	microsoft	azure_functions	Improper Access Control in Imagine Cup allows an authorized attacker to elevate privileges over a network.	NVD-CWE-noinfo	CVE-2024-38204	2024-11-9 00:34	2024-10-16	Show	GitHub Exploit DB Packet Storm