Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253181	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1203	2010-07-15 21:46	2010-06-22	Show	GitHub Exploit DB Packet Storm

253182	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Windows 7 上で稼働する Mozilla Firefox における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1121	2010-07-15 17:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

253183	2.1	注意	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性	CWE-Other その他	CVE-2008-5913	2010-07-15 17:20	2009-01-20	Show	GitHub Exploit DB Packet Storm

253184	7.4	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 の rename_principal_2_svc() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2798	2010-07-15 17:20	2007-06-26	Show	GitHub Exploit DB Packet Storm

253185	7.9	危険	日本電気サイバートラスト株式会社 MIT Kerberos ヒューレット・パッカードターボリナックスレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性	-	CVE-2007-2443	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

253186	9.3	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性	-	CVE-2007-2442	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

253187	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2277	2010-07-14 17:27	2010-03-29	Show	GitHub Exploit DB Packet Storm

253188	6.9	警告	VMware	-	複数の VMware 製品の USB サービスにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1140	2010-07-14 17:27	2010-04-9	Show	GitHub Exploit DB Packet Storm

253189	9.3	危険	シマンテック	-	Symantec Workspace Streaming (旧 Symantec AppStream) に脆弱性	CWE-287 不適切な認証	CVE-2008-4389	2010-07-14 17:26	2010-06-22	Show	GitHub Exploit DB Packet Storm

253190	5.8	警告	アップル	-	Apple iOS の設定アプリケーションにおけるユーザを追跡可能な脆弱性	CWE-DesignError	CVE-2010-1756	2010-07-14 17:26	2010-06-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304991	9.8	CRITICAL Network	esafenet	cdg	A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthor…	CWE-89 SQL Injection	CVE-2024-10659	2024-11-6 02:04	2024-11-2	Show	GitHub Exploit DB Packet Storm

304992	5.4	MEDIUM Network	webcraftplugins	image_map_pro	The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.…	CWE-862 Missing Authorization	CVE-2024-9584	2024-11-6 02:04	2024-10-26	Show	GitHub Exploit DB Packet Storm

304993	3.5	LOW Network	mattermost	mattermost	Mattermost versions 9.11.X <= 9.11.1, 9.5.x <= 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings.	NVD-CWE-Other	CVE-2024-10214	2024-11-6 02:03	2024-10-29	Show	GitHub Exploit DB Packet Storm

304994	9.8	CRITICAL Network	fabinros	simple_car_rental_system	A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname le…	CWE-89 SQL Injection	CVE-2024-10702	2024-11-6 01:52	2024-11-3	Show	GitHub Exploit DB Packet Storm

304995	6.1	MEDIUM Network	phpgurukul	car_rental_portal	A vulnerability was found in PHPGurukul Car Rental Portal 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search.php. The manipulation of the argument s…	CWE-79 Cross-site Scripting	CVE-2024-10701	2024-11-6 01:52	2024-11-3	Show	GitHub Exploit DB Packet Storm

304996	6.5	MEDIUM Network	cert	vince	VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.	CWE-276 Incorrect Default Permissions	CVE-2024-10469	2024-11-6 01:51	2024-10-29	Show	GitHub Exploit DB Packet Storm

304997	4.8	MEDIUM Adjacent	argo_workflows_project	argo_workflows	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controll…	CWE-362 CWE-1108 Race Condition Excessive Reliance on Global Variables	CVE-2024-47827	2024-11-6 01:50	2024-10-29	Show	GitHub Exploit DB Packet Storm

304998	7.5	HIGH Network	squid-cache	squid	Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resour…	NVD-CWE-noinfo	CVE-2024-45802	2024-11-6 01:45	2024-10-29	Show	GitHub Exploit DB Packet Storm

304999	7.5	HIGH Network	ruby-lang	rexml	REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). …	CWE-1333 Inefficient Regular Expression Complexity	CVE-2024-49761	2024-11-6 01:41	2024-10-29	Show	GitHub Exploit DB Packet Storm

305000	7.5	HIGH Network	ibm	cics_transaction_gateway	IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retr…	CWE-522 Insufficiently Protected Credentials	CVE-2023-50310	2024-11-6 01:40	2024-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed