Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250951	4	警告	アップルターボリナックス MySQL AB	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3834	2011-06-29 10:24	2010-09-10	Show	GitHub Exploit DB Packet Storm

250952	5	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3833	2011-06-29 10:17	2010-09-10	Show	GitHub Exploit DB Packet Storm

250953	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3790	2011-06-29 10:15	2010-11-16	Show	GitHub Exploit DB Packet Storm

250954	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3682	2011-06-29 10:14	2010-07-9	Show	GitHub Exploit DB Packet Storm

250955	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3677	2011-06-29 10:13	2010-07-9	Show	GitHub Exploit DB Packet Storm

250956	7.5	危険	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクル VMware レッドハット	-	Samba の sid_parse および dom_sid_parse 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3069	2011-06-29 10:11	2010-09-14	Show	GitHub Exploit DB Packet Storm

250957	7.8	危険	アップルオラクル	-	Oracle Solaris の FTB サーバにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2632	2011-06-29 10:10	2011-01-18	Show	GitHub Exploit DB Packet Storm

250958	5	警告	アップル VMware OpenSSL Project IBM ヒューレット・パッカード	-	OpenSSL の ssl3_get_record 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0740	2011-06-29 10:08	2010-03-24	Show	GitHub Exploit DB Packet Storm

250959	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2094	2011-06-28 12:25	2011-06-14	Show	GitHub Exploit DB Packet Storm

250960	5	警告	アドビシステムズ	-	Adobe ColdFusion におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2091	2011-06-28 12:23	2011-06-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1281	5.3	MEDIUM Network	-	-	The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 This is due to the intentForStripe() function passing user-controlled $_POST['amo…	CWE-472 External Control of Assumed-Immutable Web Parameter	CVE-2026-4911	2026-04-28 17:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1282	6.4	MEDIUM Network	-	-	The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 This is due to insufficient input sanitization and output escaping in the bundle…	CWE-79 Cross-site Scripting	CVE-2026-4805	2026-04-28 17:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1283	6.5	MEDIUM Local	-	-	In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading …	CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences	CVE-2026-41526	2026-04-28 17:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1284	6.5	MEDIUM Local	-	-	KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny. Dolphin's implementation of …	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-41525	2026-04-28 17:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1285	-		-	-	Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to prot…	CWE-306 Missing Authentication for Critical Function	CVE-2024-54013	2026-04-28 17:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1286	-		-	-	Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be e…	CWE-78 OS Command	CVE-2024-54012	2026-04-28 17:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1287	-		-	-	Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has r…	CWE-20 Improper Input Validation	CVE-2024-54011	2026-04-28 17:15	2026-04-28	Show	GitHub Exploit DB Packet Storm

1288	5.9	MEDIUM Network	-	-	In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registe…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-40356	2026-04-28 16:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1289	6.4	MEDIUM Network	-	-	The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sa…	CWE-79 Cross-site Scripting	CVE-2026-6809	2026-04-28 15:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

1290	6.4	MEDIUM Network	-	-	The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcsm_text_rotator` shortcode in all versions up to, and incl…	CWE-79 Cross-site Scripting	CVE-2026-6725	2026-04-28 15:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed