Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227791	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の sctp_icmp_proto_unreachable 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-4526	2012-12-25 18:34	2011-01-11	Show	GitHub Exploit DB Packet Storm

227792	2.1	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の install_special_mapping 関数における mmap_min_addr 制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4346	2012-12-25 18:32	2010-12-22	Show	GitHub Exploit DB Packet Storm

227793	4.7	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の drivers/scsi/bfa/bfa_core.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4343	2012-12-25 18:31	2010-12-29	Show	GitHub Exploit DB Packet Storm

227794	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の igb_receive_skb 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4263	2012-12-25 18:30	2011-01-18	Show	GitHub Exploit DB Packet Storm

227795	6.1	警告	サイバートラスト株式会社 VMware シトリックス・システムズレッドハット	-	Xen の fixup_page_fault 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-4255	2012-12-25 18:28	2011-01-13	Show	GitHub Exploit DB Packet Storm

227796	6.1	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel のソケット実装におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4251	2012-12-25 18:27	2011-03-1	Show	GitHub Exploit DB Packet Storm

227797	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の wait_for_unix_gc 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4249	2012-12-25 18:26	2010-11-29	Show	GitHub Exploit DB Packet Storm

227798	4.7	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の _exit_signal 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-4248	2012-12-25 18:24	2010-11-30	Show	GitHub Exploit DB Packet Storm

227799	5.5	警告	サイバートラスト株式会社 VMware シトリックス・システムズレッドハット	-	Xen の do_block_io_op 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4247	2012-12-25 18:22	2011-01-4	Show	GitHub Exploit DB Packet Storm

227800	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の s/exec.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4243	2012-12-25 18:21	2011-01-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195001	4.8	MEDIUM Network	helpful_project	helpful	The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_h…	-	CVE-2021-24841	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195002	5.4	MEDIUM Network	yop-poll	yop_poll	The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is all…	-	CVE-2021-24834	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195003	5.4	MEDIUM Network	yop-poll	yop_poll	The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to…	-	CVE-2021-24833	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195004	4.8	MEDIUM Network	wpplugin	accept_donations_with_paypal	The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting …	-	CVE-2021-24815	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195005	8.8	HIGH Network	simple_jwt_login_project	simple_jwt_login	The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them. Settings such as HMAC verification s…	-	CVE-2021-24804	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195006	6.5	MEDIUM Network	gesundheit-bewegt	colorful_categories	The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack	-	CVE-2021-24802	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195007	6.1	MEDIUM Network	my_tickets_project	my_tickets	The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets before outputting it in the Payment admin dashboard, which could allow unauthenti…	-	CVE-2021-24796	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195008	4.8	MEDIUM Network	webventures	client_invoicing_by_sprout_invoices	The Client Invoicing by Sprout Invoices WordPress plugin before 19.9.7 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attack…	-	CVE-2021-24787	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195009	4.3	MEDIUM Network	wp_performance_score_booster_project	wp_performance_score_booster	The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.	-	CVE-2021-24776	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm

195010	8.8	HIGH Network	xwp	stream	The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records admin dashboard before using it in a SQL statement, leading to an SQL injection…	-	CVE-2021-24772	2024-11-21 14:53	2021-11-17	Show	GitHub Exploit DB Packet Storm