Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2024, 11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191351 10 危険 Google - Google Chrome の Google URL Parsing Library における同一生成元ポリシーを回避される脆弱性 CWE-264
CWE-noinfo
CVE-2010-1663 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
191352 7.8 危険 Google - Google Chrome の Google V8 bindings におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1506 2010-11-24 14:58 2010-04-20 Show GitHub Exploit DB Packet Storm
191353 10 危険 Google - Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1505 2010-11-24 14:57 2010-04-20 Show GitHub Exploit DB Packet Storm
191354 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1504 2010-11-24 14:57 2010-04-20 Show GitHub Exploit DB Packet Storm
191355 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1503 2010-11-24 14:57 2010-04-20 Show GitHub Exploit DB Packet Storm
191356 9.3 危険 Google - Google Chrome におけるローカルファイルにアクセスされる脆弱性 CWE-noinfo
情報不足 		CVE-2010-1502 2010-11-24 14:56 2010-04-20 Show GitHub Exploit DB Packet Storm
191357 9.3 危険 Google - Google Chrome の ドラッグ＆ドロップ機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2109 2010-11-24 14:56 2010-05-25 Show GitHub Exploit DB Packet Storm
191358 10 危険 Google - Google Chrome における whitelist-mode プラグインブロッカーを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2108 2010-11-24 14:56 2010-05-25 Show GitHub Exploit DB Packet Storm
191359 10 危険 Google - Google Chrome の Safe Browsing 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2107 2010-11-24 14:41 2010-05-25 Show GitHub Exploit DB Packet Storm
191360 10 危険 Google - Google Chrome における URL バーを偽造される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2106 2010-11-24 14:40 2010-05-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2024, 10:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2011 - - - The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripti… - CVE-2024-3977 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2012 - - - The Similarity WordPress plugin through 3.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XS… - CVE-2024-3972 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2013 - - - The Similarity WordPress plugin through 3.0 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack - CVE-2024-3971 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2014 - - - The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin vi… - CVE-2024-3966 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2015 - - - The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack - CVE-2024-3965 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2016 - - - The Alemha watermarker WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting at… - CVE-2024-3754 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2017 - - - The LuckyWP Table of Contents WordPress plugin through 2.1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scrip… - CVE-2024-2218 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2018 6.4 MEDIUM
Network 		- - The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via album gallery custom URLs in all versions up to, and including, 2.4.15 due to insu… - CVE-2024-2122 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2019 - - - Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.5. CWE-862
 Missing Authorization 		CVE-2024-23504 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm
2020 - - - The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about event… - CVE-2024-1295 2024-06-17 21:42 2024-06-14 Show GitHub Exploit DB Packet Storm