Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228291 7.5 危険 stefan tannhaeuser - TYPO3 用の tv21_talkshow エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0332 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228292 4.3 警告 stefan tannhaeuser - TYPO3 用の tv21_talkshow エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0331 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228293 4.3 警告 rastislav birka - TYPO3 用の cs2_unitconv エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0328 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228294 5 警告 sebastian baumann - TYPO3 用の SB Folderdownload エクステンションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0325 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228295 4.3 警告 x10media - Glitter Central Script の submitlink.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0320 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228296 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の ns-slapd におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0313 2012-12-20 19:28 2010-01-14 Show GitHub Exploit DB Packet Storm
228297 6.8 警告 サン・マイクロシステムズ - Sun Java System Identity Manager における管理アクセス権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0311 2012-12-20 19:28 2010-01-11 Show GitHub Exploit DB Packet Storm
228298 5 警告 ProcessOne - ejabberd の ejabberd_c2s.erl におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0305 2012-12-20 19:28 2010-01-28 Show GitHub Exploit DB Packet Storm
228299 5 警告 tuxfamily - Chrony の chronyd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0294 2012-12-20 19:28 2010-02-8 Show GitHub Exploit DB Packet Storm
228300 5 警告 tuxfamily - Chrony の chronyd のクライアント記録機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0293 2012-12-20 19:28 2010-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194681 4.8 MEDIUM
Network 		wp_sitemap_page_project wp_sitemap_page The WP Sitemap Page WordPress plugin before 1.7.0 does not properly sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when … CWE-79
Cross-site Scripting 		CVE-2021-24715 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194682 5.4 MEDIUM
Network 		flat_preloader_project flat_preloader The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its settings, as well as does not sanitise and escape them, which could allow attackers to a make logged in … - CVE-2021-24685 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194683 5.4 MEDIUM
Network 		wpkube cool_tag_cloud The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-… CWE-79
Cross-site Scripting 		CVE-2021-24682 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194684 4.8 MEDIUM
Network 		sonaar mp3_audio_player_for_music\
_radio_\&_podcast 		The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to pe… CWE-79
Cross-site Scripting 		CVE-2021-24624 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194685 4.3 MEDIUM
Network 		wpplugin accept_donations_with_paypal The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and … - CVE-2021-24572 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194686 4.3 MEDIUM
Network 		wpplugin accept_donations_with_paypal The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create a new button is lacking a CSRF check. An… - CVE-2021-24570 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194687 4.8 MEDIUM
Network 		dazzlersoftware coming_soon\
_under_construction_\&_maintenance_mode_by_dazzler 		The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming … - CVE-2021-24539 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194688 6.1 MEDIUM
Network 		yop-poll yop-poll The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting CWE-79
Cross-site Scripting 		CVE-2021-24885 2024-11-21 14:53 2021-10-25 Show GitHub Exploit DB Packet Storm
194689 4.8 MEDIUM
Network 		great-quotes_project great-quotes The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks … CWE-79
Cross-site Scripting 		CVE-2021-24785 2024-11-21 14:53 2021-10-25 Show GitHub Exploit DB Packet Storm
194690 6.5 MEDIUM
Network 		wp_debugging_project wp_debugging The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing any authorisation and CSRF checks, as a result, the settings can be updated by u… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2021-24779 2024-11-21 14:53 2021-10-25 Show GitHub Exploit DB Packet Storm