Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253541	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックス OpenLDAP Foundation	-	OpenLDAP における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3767	2010-09-27 16:23	2009-10-23	Show	GitHub Exploit DB Packet Storm

253542	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3021	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

253543	5	警告	Opera Software ASA	-	Opera の news-feed プレビュー機能における任意のフィードの購読を強制される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3020	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

253544	9.3	危険	Opera Software ASA	-	Opera におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3019	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

253545	9.3	危険	Opera Software ASA	-	Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2666	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

253546	4.3	警告	Opera Software ASA	-	Opera における URI の処理に関するクロスサイトスクリプティングの脆弱性\	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2665	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

253547	4.3	警告	Opera Software ASA	-	Opera の HTML コンテンツにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2664	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

253548	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2663	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

253549	4.3	警告	Opera Software ASA	-	Opera におけるポップアップブロッカーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2662	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

253550	4.3	警告	Opera Software ASA	-	Opera における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2661	2010-09-27 16:19	2010-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310421	9.0	CRITICAL Network	acquia	mautic	Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permiss…	CWE-79 Cross-site Scripting	CVE-2021-27915	2024-09-29 09:22	2024-09-17	Show	GitHub Exploit DB Packet Storm

310422	7.8	HIGH Local	apple	xcode	This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gain access to a user's Keychain items.	NVD-CWE-noinfo	CVE-2024-44162	2024-09-29 09:16	2024-09-17	Show	GitHub Exploit DB Packet Storm

310423	4.8	MEDIUM Network	decidim	decidim	decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organizations. The admin panel is subject to potential Cross-site scripting (XSS) attac…	CWE-79 Cross-site Scripting	CVE-2024-32034	2024-09-29 09:14	2024-09-17	Show	GitHub Exploit DB Packet Storm

310424	5.9	MEDIUM Network	alf	alf	alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of…	CWE-362 Race Condition	CVE-2024-45300	2024-09-29 09:08	2024-09-6	Show	GitHub Exploit DB Packet Storm

310425	5.3	MEDIUM Network	phoenixcontact	tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua…	An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. T…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-7734	2024-09-29 08:56	2024-09-10	Show	GitHub Exploit DB Packet Storm

310426	8.8	HIGH Network	qnap	music_station	An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have …	CWE-287 Improper Authentication	CVE-2023-45038	2024-09-29 08:51	2024-09-7	Show	GitHub Exploit DB Packet Storm

310427	8.8	HIGH Network	qnap	video_station	An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fi…	CWE-78 CWE-77 OS Command Command Injection	CVE-2023-47563	2024-09-29 08:47	2024-09-7	Show	GitHub Exploit DB Packet Storm

310428	8.8	HIGH Network	qnap	video_station	A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed…	CWE-89 SQL Injection	CVE-2023-50360	2024-09-29 08:44	2024-09-7	Show	GitHub Exploit DB Packet Storm

310429	7.8	HIGH Local	ui	unifi_network_application	A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with unifi user shell acces…	CWE-77 Command Injection	CVE-2024-42025	2024-09-29 03:35	2024-09-14	Show	GitHub Exploit DB Packet Storm

310430	6.1	MEDIUM Network	mm-breaking_news_project	mm-breaking_news	The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting…	CWE-79 Cross-site Scripting	CVE-2024-8056	2024-09-28 06:29	2024-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed