Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254611	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3768	2011-05-18 10:34	2010-12-9	Show	GitHub Exploit DB Packet Storm

254612	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3765	2011-05-18 10:33	2010-10-27	Show	GitHub Exploit DB Packet Storm

254613	5.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3178	2011-05-18 10:31	2010-10-19	Show	GitHub Exploit DB Packet Storm

254614	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の LookupGetterOrSetter 関数における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3183	2011-05-18 10:30	2010-10-19	Show	GitHub Exploit DB Packet Storm

254615	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsBarProp 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3180	2011-05-18 10:29	2010-10-19	Show	GitHub Exploit DB Packet Storm

254616	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の text-rendering の機能性におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3179	2011-05-18 10:28	2010-10-19	Show	GitHub Exploit DB Packet Storm

254617	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3176	2011-05-18 10:26	2010-10-19	Show	GitHub Exploit DB Packet Storm

254618	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3175	2011-05-18 10:25	2010-10-19	Show	GitHub Exploit DB Packet Storm

254619	2.1	注意	トレンドマイクロ	-	ウイルスバスター2009 におけるキー入力暗号化機能に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-1327	2011-05-17 11:01	2011-05-17	Show	GitHub Exploit DB Packet Storm

254620	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における Global Payroll - North America に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0859	2011-05-17 09:49	2011-04-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311141	5.4	MEDIUM Network	bdthemes	element_pack	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip' paramet…	CWE-79 Cross-site Scripting	CVE-2024-9657	2024-11-9 01:00	2024-11-5	Show	GitHub Exploit DB Packet Storm

311142	4.3	MEDIUM Network	g5plus	ultimate_bootstrap_elements_for_elementor	The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' functio…	NVD-CWE-noinfo	CVE-2024-10329	2024-11-9 00:59	2024-11-5	Show	GitHub Exploit DB Packet Storm

311143	7.3	HIGH Network	tickera	tickera	The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.5.4.4. This is due to the software allowing users t…	CWE-94 Code Injection	CVE-2024-10263	2024-11-9 00:59	2024-11-5	Show	GitHub Exploit DB Packet Storm

311144	4.3	MEDIUM Network	themeum	wp_crowdfunding	Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10.	CWE-862 Missing Authorization	CVE-2024-43937	2024-11-9 00:57	2024-11-2	Show	GitHub Exploit DB Packet Storm

311145	5.3	MEDIUM Network	combodo	itop	Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a valid account. As a fix the sentence displ…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-51739	2024-11-9 00:56	2024-11-6	Show	GitHub Exploit DB Packet Storm

311146	4.1	MEDIUM Network	nvidia	nvidia_container_toolkit nvidia_gpu_operator	NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name …	NVD-CWE-Other	CVE-2024-0134	2024-11-9 00:53	2024-11-6	Show	GitHub Exploit DB Packet Storm

311147	6.1	MEDIUM Network	hashicorp	consul	A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and …	CWE-79 Cross-site Scripting	CVE-2024-10086	2024-11-9 00:49	2024-10-31	Show	GitHub Exploit DB Packet Storm

311148	4.3	MEDIUM Network	hcltech	connections	HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entit…	NVD-CWE-noinfo	CVE-2024-30106	2024-11-9 00:43	2024-10-29	Show	GitHub Exploit DB Packet Storm

311149	6.1	MEDIUM Network	elabftw	elabftw	eLabFTW is an open source electronic lab notebook for research labs. A vulnerability in versions prior to 5.1.5 allows an attacker to inject arbitrary HTML tags in the pages: "experiments.php" (show …	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2024-47826	2024-11-9 00:41	2024-10-15	Show	GitHub Exploit DB Packet Storm

311150	7.5	HIGH Network	vercel	next.js	Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a …	CWE-674 Uncontrolled Recursion	CVE-2024-47831	2024-11-9 00:39	2024-10-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed