Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255611 9.3 危険 CA Technologies - CA Internet Security Suite の UmxEventCli.dll におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2511 2010-12-24 11:41 2008-06-2 Show GitHub Exploit DB Packet Storm
255612 7.5 危険 CA Technologies - CA BrightStor ARCServe Backup のサーバ内の xdr 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2242 2010-12-24 11:41 2008-05-19 Show GitHub Exploit DB Packet Storm
255613 10 危険 CA Technologies - CA BrightStor ARCServe Backup の caloggerd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2241 2010-12-24 11:40 2008-05-19 Show GitHub Exploit DB Packet Storm
255614 7.8 危険 CA Technologies - CA Secure Content Manager の eTrust Common Services Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-1984 2010-12-24 11:40 2008-04-27 Show GitHub Exploit DB Packet Storm
255615 10 危険 CA Technologies - 複数の CA 製品の NetBackup サービスにおける任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-1329 2010-12-24 11:39 2008-04-11 Show GitHub Exploit DB Packet Storm
255616 9.3 危険 CA Technologies - 複数の CA 製品の LGServer サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1328 2010-12-24 11:39 2008-04-11 Show GitHub Exploit DB Packet Storm
255617 10 危険 ターボリナックス
ProFTPD Project		 - ProFTPD の pr_netio_telnet_get 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4221 2010-12-22 15:20 2010-10-29 Show GitHub Exploit DB Packet Storm
255618 7.1 危険 サイバートラスト株式会社
ProFTPD Project
ターボリナックス		 - ProFTPD の mod_site_misc モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3867 2010-12-22 15:19 2010-10-29 Show GitHub Exploit DB Packet Storm
255619 9.3 危険 Mozilla Foundation
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3174 2010-12-22 15:16 2010-10-19 Show GitHub Exploit DB Packet Storm
255620 4.3 警告 Mozilla Foundation
オラクル		 - 複数の Mozilla 製品の SafeJSObjectWrapper 実装における同一生成元ポリシーを回避される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2763 2010-12-22 15:15 2010-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318161 6.1 MEDIUM
Network 		elecom wrc-x3000gs2-b_firmware
wrc-x3000gs2-w_firmware
wrc-x3000gs2a-b_firmware 		Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, and WRC-X3000GS2A-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page whil… CWE-79
Cross-site Scripting 		CVE-2024-34577 2024-09-3 23:59 2024-08-30 Show GitHub Exploit DB Packet Storm
318162 5.4 MEDIUM
Network 		hubspot hubspot The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting Widget in all version… CWE-79
Cross-site Scripting 		CVE-2024-5879 2024-09-3 23:59 2024-08-30 Show GitHub Exploit DB Packet Storm
318163 3.7 LOW
Network 		elecom wab-i1750-ps_firmware Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without … CWE-306
Missing Authentication for Critical Function 		CVE-2024-39300 2024-09-3 23:57 2024-08-30 Show GitHub Exploit DB Packet Storm
318164 7.2 HIGH
Network 		theeventscalendar events_calendar_pro The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.0.2 via deserialization of untrusted input from the 'filters' parameter in w… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-8016 2024-09-3 23:51 2024-08-30 Show GitHub Exploit DB Packet Storm
318165 6.3 MEDIUM
Network 		tutorlms tutor_lms_pro The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized administrative actions execution due to a missing capability checks on multiple functions like treport_quiz_atttempt_delete and t… CWE-862
 Missing Authorization 		CVE-2024-5784 2024-09-3 23:48 2024-08-30 Show GitHub Exploit DB Packet Storm
318166 4.3 MEDIUM
Network 		themeific tourfic The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.20. This is due to missing or incorrect nonce validation on the tf_order_status… CWE-352
 Origin Validation Error 		CVE-2024-8319 2024-09-3 23:43 2024-08-30 Show GitHub Exploit DB Packet Storm
318167 5.4 MEDIUM
Network 		wpvibes elementor_addon_elements The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.13.6 due to insufficient input sanitization… CWE-79
Cross-site Scripting 		CVE-2024-7122 2024-09-3 23:41 2024-08-30 Show GitHub Exploit DB Packet Storm
318168 - - - Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make imp… - CVE-2024-3655 2024-09-3 23:35 2024-09-3 Show GitHub Exploit DB Packet Storm
318169 6.3 MEDIUM
Network 		maxfoundry media_library_folders The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several AJAX functions in the media-library-plus.php file in all versions up to… CWE-862
 Missing Authorization 		CVE-2024-7858 2024-09-3 23:34 2024-08-30 Show GitHub Exploit DB Packet Storm
318170 8.8 HIGH
Network 		codection clean_login The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the clean-login-register shortcode. This makes … CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2024-8252 2024-09-3 23:31 2024-08-30 Show GitHub Exploit DB Packet Storm