Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249241 7.6 危険 アドビシステムズ
アップル
ヒューレット・パッカード
OpenSSL Project
VMware
レッドハット
- OpenSSL の ssl/t1_lib.c における任意のコードを実行される脆弱性 CWE-362
競合状態
CVE-2010-3864 2012-06-20 17:08 2010-11-16 Show GitHub Exploit DB Packet Storm
249242 9.3 危険 The Document Foundation - LibreOffice に複数の脆弱性 CWE-119
バッファエラー
CVE-2011-2685  2012-06-20 17:03 2011-06-23 Show GitHub Exploit DB Packet Storm
249243 3.3 注意 Gajim.org - Gajim の src/common/latex.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2012-2093 2012-06-20 16:45 2012-04-10 Show GitHub Exploit DB Packet Storm
249244 9.3 危険 マイクロソフト - Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0141 2012-06-20 16:29 2012-05-8 Show GitHub Exploit DB Packet Storm
249245 7.5 危険 Mozilla Foundation - 複数の Mozilla 製品の nsHTMLSelectElement 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-3671 2012-06-20 15:24 2012-06-18 Show GitHub Exploit DB Packet Storm
249246 3.6 注意 MantisBT Group - MantisBT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2692 2012-06-20 15:15 2012-06-2 Show GitHub Exploit DB Packet Storm
249247 7.5 危険 MantisBT Group - MantisBT の mc_issue_note_update 関数における任意の bugnote を編集される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2691 2012-06-20 15:09 2012-06-3 Show GitHub Exploit DB Packet Storm
249248 7.5 危険 PyPam - PyPam の PAMmodule.c 内の PyPAM_conv におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1502 2012-06-20 14:22 2012-06-16 Show GitHub Exploit DB Packet Storm
249249 5 警告 レッドハット - Red Hat Network Satellite におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2012-1145 2012-06-20 13:56 2012-03-29 Show GitHub Exploit DB Packet Storm
249250 5 警告 GNU Project - Gnash の plugin/npapi/plugin.cpp における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4328 2012-06-20 10:35 2012-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196381 7.2 HIGH
Network
flippercode wp_google_map Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privilege… CWE-89
SQL Injection
CVE-2021-24130 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196382 5.4 MEDIUM
Network
themify portfolio_post Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS) vulnerabilities allowing low-privileged … CWE-79
Cross-site Scripting
CVE-2021-24129 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196383 5.4 MEDIUM
Network
wpdarko team_members Unvalidated input and lack of output encoding in the Team Members WordPress plugin, versions before 5.0.4, lead to Cross-site scripting vulnerabilities allowing medium-privileged authenticated attack… CWE-79
Cross-site Scripting
CVE-2021-24128 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196384 5.4 MEDIUM
Network
caseproof thirstyaffiliates_affiliate_link_manager Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS… CWE-79
Cross-site Scripting
CVE-2021-24127 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196385 5.4 MEDIUM
Network
enviragallery envira_gallery Unvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did not properly sanitise the images metadata (namely title) before outputting them… CWE-79
Cross-site Scripting
CVE-2021-24126 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196386 7.2 HIGH
Network
contact_form_submissions_project contact_form_submissions Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7_contact_form GET parameter when submitting a filter request as a high privile… CWE-89
SQL Injection
CVE-2021-24125 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196387 6.1 MEDIUM
Network
terryl wp_shieldon Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is show… CWE-79
Cross-site Scripting
CVE-2021-24124 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196388 7.2 HIGH
Network
blubrry powerpress Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privile… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2021-24123 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
196389 7.5 HIGH
Network
facebook proxygen
mvfst
A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assertion. Per QUIC specification, this particular message sho… CWE-617
 Reachable Assertion
CVE-2021-24029 2024-11-21 14:52 2021-03-16 Show GitHub Exploit DB Packet Storm
196390 7.8 HIGH
Local
microsoft high_efficiency_video_coding HEVC Video Extensions Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-24110 2024-11-21 14:52 2021-03-12 Show GitHub Exploit DB Packet Storm