Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256631	9.3	危険	アップル	-	Apple Safari の Cascading Style Sheet 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0046	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

256632	9.3	危険	アップル	-	Apple Safari の ImageIO における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0043	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

256633	4.3	警告	アップル	-	Apple Safari の ImageIO における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0041	2010-07-13 16:29	2010-03-15	Show	GitHub Exploit DB Packet Storm

256634	6.8	警告	アップルサイバートラスト株式会社 Mozilla Foundation レッドハット	-	libc における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0689	2010-07-13 16:28	2009-07-1	Show	GitHub Exploit DB Packet Storm

256635	6.8	警告	アップル	-	WebKit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2816	2010-07-13 16:28	2009-11-11	Show	GitHub Exploit DB Packet Storm

256636	9.3	危険	アップル	-	Apple Safari の WebKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2195	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

256637	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml の Notation または Enumeration 属性タイプの処理におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2416	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

256638	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-2414	2010-07-13 16:26	2009-08-11	Show	GitHub Exploit DB Packet Storm

256639	4.3	警告	アップル	-	Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性	CWE-Other その他	CVE-2009-1723	2010-07-13 16:25	2009-08-5	Show	GitHub Exploit DB Packet Storm

256640	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1382	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
316291	4.3	MEDIUM Network	bplugins	html5_video_player	The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_password' function in…	CWE-862 Missing Authorization	CVE-2024-7721	2024-09-19 03:01	2024-09-11	Show	GitHub Exploit DB Packet Storm

316292	7.8	HIGH Local	ivanti	workspace_control	An authentication bypass weakness in the message broker service of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges.	CWE-306 Missing Authentication for Critical Function	CVE-2024-8012	2024-09-19 02:53	2024-09-11	Show	GitHub Exploit DB Packet Storm

316293	7.8	HIGH Local	ivanti	workspace_control	DLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.	CWE-427 Uncontrolled Search Path Element	CVE-2024-44107	2024-09-19 02:52	2024-09-11	Show	GitHub Exploit DB Packet Storm

316294	7.8	HIGH Local	ivanti	workspace_control	Insufficient server-side controls in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges.	NVD-CWE-Other	CVE-2024-44106	2024-09-19 02:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

316295	7.8	HIGH Local	ivanti	workspace_control	Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to obtain OS credentials.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2024-44105	2024-09-19 02:48	2024-09-11	Show	GitHub Exploit DB Packet Storm

316296	7.8	HIGH Local	ivanti	workspace_control	An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated …	CWE-290 Authentication Bypass by Spoofing	CVE-2024-44104	2024-09-19 02:33	2024-09-11	Show	GitHub Exploit DB Packet Storm

316297	8.8	HIGH Network	external-secrets	external_secrets_operator	External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-45041	2024-09-19 02:31	2024-09-10	Show	GitHub Exploit DB Packet Storm

316298	9.8	CRITICAL Network	angeljudesuarez	tailoring_management_system	A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file ssms.php. The manipulation of …	CWE-89 SQL Injection	CVE-2024-8611	2024-09-19 02:24	2024-09-10	Show	GitHub Exploit DB Packet Storm

316299	7.8	HIGH Local	ivanti	workspace_control	DLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges.	CWE-426 Untrusted Search Path	CVE-2024-44103	2024-09-19 02:18	2024-09-11	Show	GitHub Exploit DB Packet Storm

316300	6.1	MEDIUM Network	teleogistic	invite_anyone	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Boone Gorges Invite Anyone allows Reflected XSS.This issue affects Invite Anyone: from n/a…	CWE-79 Cross-site Scripting	CVE-2024-43327	2024-09-19 02:07	2024-08-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed