Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253331	2.6	注意	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4456	2010-04-15 18:15	2008-10-6	Show	GitHub Exploit DB Packet Storm

253332	10	危険	アップル	-	Apple Mac OS X の Mail における脆弱性	CWE-noinfo 情報不足	CVE-2010-0508	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

253333	6.8	警告	アップル	-	Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0507	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

253334	6.8	警告	アップル	-	Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0506	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

253335	6.8	警告	アップル	-	Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0505	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

253336	7.5	危険	アップル	-	Apple Mac OS X の iChat サーバにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0504	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

253337	6.5	警告	アップル	-	Apple Mac OS X の iChat サーバにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0503	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

253338	4.3	警告	アップル	-	Apple Mac OS X の iChat サーバにおけるメッセージの監査を回避可能な脆弱性	CWE-DesignError	CVE-2010-0502	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

253339	5	警告	アップルレッドハット jabberd 2.x project	-	Jabber Studio jabberd の SASL ネゴシエーションにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-1329	2010-04-14 17:10	2006-03-21	Show	GitHub Exploit DB Packet Storm

253340	7.2	危険	アップル	-	Apple Mac OS X の FTP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0501	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1741	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-elementor allows DOM-Based XSS.This…	CWE-79 Cross-site Scripting	CVE-2026-39702	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm

1742	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.Thi…	CWE-79 Cross-site Scripting	CVE-2026-39703	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm

1743	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly Configured Ac…	CWE-862 Missing Authorization	CVE-2026-39704	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm

1744	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in Mulika Team MIPL WC Multisite Sync mipl-wc-multisite-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MIPL WC Mul…	CWE-862 Missing Authorization	CVE-2026-39705	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm

1745	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in Netro Systems Make My Trivia trivialy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Make My Trivia: from n/a throug…	CWE-862 Missing Authorization	CVE-2026-39706	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm

1746	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in ZealousWeb Accept PayPal Payments using Contact Form 7 contact-form-7-paypal-extension allows Exploiting Incorrectly Configured Access Control Security Levels.T…	CWE-862 Missing Authorization	CVE-2026-39707	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm

1747	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail Every call to queue init should have a corresponding fini call. Skipping this…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-23350	2026-04-25 03:05	2026-03-25	Show	GitHub Exploit DB Packet Storm

1748	7.8	HIGH Local	linux	linux_kernel	En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: drm/xe/queue: Llamar a fini al fallar la creación de la cola de ejecución Cada llamada a init de cola debería tener una llamada …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-23350	2026-04-25 03:05	2026-03-25	Show	GitHub Exploit DB Packet Storm

1749	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uicore UiCore Elements uicore-elements allows Stored XSS.This issue affects UiCore Elements: from…	CWE-79 Cross-site Scripting	CVE-2026-39708	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm

1750	5.3	MEDIUM Network	-	-	Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: from n/a through <= 1.…	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2026-39709	2026-04-25 03:05	2026-04-8	Show	GitHub Exploit DB Packet Storm