Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253671 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3072 2010-04-1 13:43 2009-09-9 Show GitHub Exploit DB Packet Storm
253672 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox における任意の PKCS11 モジュールをインストール/削除させる脆弱性 CWE-Other
その他 		CVE-2009-3076 2010-04-1 13:42 2009-09-9 Show GitHub Exploit DB Packet Storm
253673 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3077 2010-04-1 13:41 2009-09-9 Show GitHub Exploit DB Packet Storm
253674 5 警告 Mozilla Foundation
レッドハット		 - Mozilla Firefox におけるドメイン名の処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2470 2010-04-1 13:40 2009-07-21 Show GitHub Exploit DB Packet Storm
253675 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/Thunderbird の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-2466 2010-04-1 13:38 2009-07-21 Show GitHub Exploit DB Packet Storm
253676 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2463 2010-04-1 13:36 2009-07-21 Show GitHub Exploit DB Packet Storm
253677 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-2462 2010-04-1 13:34 2009-07-21 Show GitHub Exploit DB Packet Storm
253678 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の fasync_helper 関数における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4141 2010-03-29 15:18 2010-01-19 Show GitHub Exploit DB Packet Storm
253679 9.3 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0045 2010-03-25 11:49 2010-03-15 Show GitHub Exploit DB Packet Storm
253680 4.3 警告 アップル - Apple Safari の PubSub における Cookie が設定される脆弱性 CWE-16
環境設定 		CVE-2010-0044 2010-03-25 11:49 2010-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
308351 4.8 MEDIUM
Network 		majeedraza carousel_slider The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks eve… CWE-79
Cross-site Scripting 		CVE-2024-6850 2024-09-28 03:30 2024-09-13 Show GitHub Exploit DB Packet Storm
308352 7.2 HIGH
Network 		nsqua simply_schedule_appointments The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injec… NVD-CWE-Other
CVE-2024-7129 2024-09-28 03:26 2024-09-13 Show GitHub Exploit DB Packet Storm
308353 6.5 MEDIUM
Network 		michalaugustyniak misiek_photo_album The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attackers to make logged in users delete arbitrary albums via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-7817 2024-09-28 03:26 2024-09-12 Show GitHub Exploit DB Packet Storm
308354 4.8 MEDIUM
Network 		wp-master logo_manager_for_enamad The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scri… CWE-79
Cross-site Scripting 		CVE-2024-5170 2024-09-28 03:23 2024-09-17 Show GitHub Exploit DB Packet Storm
308355 5.4 MEDIUM
Network 		seanschulte vikinghammer_tweet The Vikinghammer Tweet WordPress plugin through 0.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add… CWE-352
 Origin Validation Error 		CVE-2024-8043 2024-09-28 03:22 2024-09-17 Show GitHub Exploit DB Packet Storm
308356 5.4 MEDIUM
Network 		moc special_feed_items The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add… CWE-352
 Origin Validation Error 		CVE-2024-8051 2024-09-28 03:19 2024-09-17 Show GitHub Exploit DB Packet Storm
308357 6.1 MEDIUM
Network 		michalaugustyniak misiek_photo_album The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add… CWE-79
Cross-site Scripting 		CVE-2024-7818 2024-09-28 03:18 2024-09-12 Show GitHub Exploit DB Packet Storm
308358 5.4 MEDIUM
Network 		alaingonzalez accordion_image_menu The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a… CWE-352
 Origin Validation Error 		CVE-2024-8092 2024-09-28 03:17 2024-09-17 Show GitHub Exploit DB Packet Storm
308359 6.5 MEDIUM
Network 		jakesnyder enhanced_search_box The Enhanced Search Box WordPress plugin through 0.6.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-8091 2024-09-28 03:17 2024-09-17 Show GitHub Exploit DB Packet Storm
308360 4.3 MEDIUM
Network 		github enterprise_server An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public repository. This was … CWE-863
 Incorrect Authorization 		CVE-2024-7711 2024-09-28 03:17 2024-08-21 Show GitHub Exploit DB Packet Storm