Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256201	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3077	2010-04-1 13:41	2009-09-9	Show	GitHub Exploit DB Packet Storm

256202	5	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox におけるドメイン名の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2470	2010-04-1 13:40	2009-07-21	Show	GitHub Exploit DB Packet Storm

256203	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2466	2010-04-1 13:38	2009-07-21	Show	GitHub Exploit DB Packet Storm

256204	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2463	2010-04-1 13:36	2009-07-21	Show	GitHub Exploit DB Packet Storm

256205	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2462	2010-04-1 13:34	2009-07-21	Show	GitHub Exploit DB Packet Storm

256206	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の fasync_helper 関数における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4141	2010-03-29 15:18	2010-01-19	Show	GitHub Exploit DB Packet Storm

256207	9.3	危険	アップル	-	Apple Safari における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0045	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

256208	4.3	警告	アップル	-	Apple Safari の PubSub における Cookie が設定される脆弱性	CWE-16 環境設定	CVE-2010-0044	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

256209	7.5	危険	サン・マイクロシステムズ GNU Project サイバートラスト株式会社レッドハット	-	GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4476	2010-03-25 11:47	2007-08-17	Show	GitHub Exploit DB Packet Storm

256210	7.8	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3282	2010-03-24 12:23	2009-10-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306891	-		-	-	Statmatic is a Laravel and Git powered content management system (CMS). Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location dif…	CWE-22 Path Traversal	CVE-2024-52600	2024-11-20 02:15	2024-11-20	Show	GitHub Exploit DB Packet Storm

306892	4.3	MEDIUM Network	janeczku	calibre-web	A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of …	CWE-209 Information Exposure Through an Error Message	CVE-2021-3986	2024-11-20 02:12	2024-11-15	Show	GitHub Exploit DB Packet Storm

306893	9.8	CRITICAL Network	dompdf_project	dompdf	An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. This issue affects all versio…	CWE-611 XXE	CVE-2021-3902	2024-11-20 02:12	2024-11-15	Show	GitHub Exploit DB Packet Storm

306894	5.4	MEDIUM Network	sylius	sylius	sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. This vulnerability allows attackers to inject malicious scripts that…	CWE-79 Cross-site Scripting	CVE-2021-3841	2024-11-20 02:11	2024-11-15	Show	GitHub Exploit DB Packet Storm

306895	9.8	CRITICAL Network	dompdf_project	dompdf	DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files o…	CWE-502 Deserialization of Untrusted Data	CVE-2021-3838	2024-11-20 02:11	2024-11-15	Show	GitHub Exploit DB Packet Storm

306896	8.8	HIGH Network	chatwoot	chatwoot	A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerability allows an attacker to upload an SVG file containing a …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-3742	2024-11-20 02:10	2024-11-15	Show	GitHub Exploit DB Packet Storm

306897	8.8	HIGH Network	vanquish	user_extra_fields	The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajax_save_fields() function in all versions up to, and including, 1…	CWE-862 Missing Authorization	CVE-2024-10800	2024-11-20 02:08	2024-11-13	Show	GitHub Exploit DB Packet Storm

306898	5.4	MEDIUM Network	chatwoot	chatwoot	A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.6. The vulnerability occurs when a user uploads an SVG file containing a malic…	CWE-79 Cross-site Scripting	CVE-2021-3741	2024-11-20 02:07	2024-11-15	Show	GitHub Exploit DB Packet Storm

306899	5.7	MEDIUM Network	wpdeveloper	essential_addons_for_elementor	The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, …	NVD-CWE-noinfo	CVE-2024-8979	2024-11-20 02:05	2024-11-15	Show	GitHub Exploit DB Packet Storm

306900	5.7	MEDIUM Network	wpdeveloper	essential_addons_for_elementor	The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, …	NVD-CWE-noinfo	CVE-2024-8978	2024-11-20 02:04	2024-11-15	Show	GitHub Exploit DB Packet Storm