Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254501 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey の Web ワーカー機能における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0160 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
254502 2.1 注意 サイバートラスト株式会社
GNOME Project
レッドハット
- NetworkManager の nm-connection-editor における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-4145 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
254503 6.8 警告 サイバートラスト株式会社
GNOME Project
レッドハット
- NetworkManager における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2009-4144 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
254504 5 警告 Squid-cache.org - Squid の htcpHandleTstRequest 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0639 2010-03-8 12:28 2010-02-12 Show GitHub Exploit DB Packet Storm
254505 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション
CVE-2009-3302 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
254506 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の filter/ww8/ww8par2.cxx における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-3301 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
254507 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2950 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
254508 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-2949 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
254509 4.3 警告 アドビシステムズ - Adobe BlazeDS における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2009-3960 2010-03-5 10:32 2010-02-11 Show GitHub Exploit DB Packet Storm
254510 6.8 警告 Linux
レッドハット
- KVM の pit_ioport_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定
CVE-2010-0309 2010-03-4 13:41 2010-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
304641 7.5 HIGH
Network
schneider-electric powerlogic_pm5341_firmware
powerlogic_pm5340_firmware
powerlogic_pm5320_firmware
CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in… CWE-400
 Uncontrolled Resource Consumption
CVE-2024-9409 2024-11-20 00:59 2024-11-13 Show GitHub Exploit DB Packet Storm
304642 4.8 MEDIUM
Network
vektor-inc vk_all_in_one_expansion_unit Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of th… CWE-79
Cross-site Scripting
CVE-2024-52268 2024-11-20 00:57 2024-11-13 Show GitHub Exploit DB Packet Storm
304643 4.8 MEDIUM
Network
pimcore pimcore A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date… CWE-79
Cross-site Scripting
CVE-2023-2332 2024-11-20 00:55 2024-11-15 Show GitHub Exploit DB Packet Storm
304644 5.4 MEDIUM
Network
royal-elementor-addons royal_elementor_addons The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 1.7.1001 due to insu… CWE-79
Cross-site Scripting
CVE-2024-9668 2024-11-20 00:55 2024-11-13 Show GitHub Exploit DB Packet Storm
304645 5.5 MEDIUM
Local
gpac gpac A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38. This vulnerability can lead to a double-… CWE-416
 Use After Free
CVE-2023-4679 2024-11-20 00:54 2024-11-15 Show GitHub Exploit DB Packet Storm
304646 5.9 MEDIUM
Network
phpipam phpipam phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'get… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2024-0787 2024-11-20 00:53 2024-11-15 Show GitHub Exploit DB Packet Storm
304647 5.4 MEDIUM
Network
royal-elementor-addons royal_elementor_addons The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps widget in all versions up to, and including, 1.7.1001 due to insufficien… CWE-79
Cross-site Scripting
CVE-2024-9059 2024-11-20 00:53 2024-11-13 Show GitHub Exploit DB Packet Storm
304648 6.1 MEDIUM
Network
advancedformintegration advanced_form_integration The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the UR… CWE-79
Cross-site Scripting
CVE-2024-10877 2024-11-20 00:52 2024-11-13 Show GitHub Exploit DB Packet Storm
304649 7.2 HIGH
Network
mayurik best_employee_management_system A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /admin/edit_role.php. The manipulation of … CWE-89
SQL Injection
CVE-2024-11213 2024-11-20 00:48 2024-11-15 Show GitHub Exploit DB Packet Storm
304650 8.8 HIGH
Network
mayurik best_employee_management_system A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/fetch_… CWE-89
SQL Injection
CVE-2024-11212 2024-11-20 00:48 2024-11-15 Show GitHub Exploit DB Packet Storm