Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255361	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4194	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

255362	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4193	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

255363	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4192	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

255364	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4191	2011-03-11 18:20	2011-02-8	Show	GitHub Exploit DB Packet Storm

255365	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の ImageIO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0846	2011-03-11 10:16	2010-03-30	Show	GitHub Exploit DB Packet Storm

255366	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の ImageIO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0841	2011-03-11 10:11	2010-03-30	Show	GitHub Exploit DB Packet Storm

255367	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	Oracle Sun Java が Java アプレットの署名を正しく検証しない脆弱性	CWE-noinfo 情報不足	CVE-2010-0087	2011-03-11 10:10	2010-04-6	Show	GitHub Exploit DB Packet Storm

255368	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0838	2011-03-11 10:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

255369	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0839	2011-03-11 10:08	2010-03-30	Show	GitHub Exploit DB Packet Storm

255370	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0847	2011-03-11 10:07	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195081	4.8	MEDIUM Network	great-quotes_project	great-quotes	The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks …	CWE-79 Cross-site Scripting	CVE-2021-24785	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195082	6.5	MEDIUM Network	wp_debugging_project	wp_debugging	The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing any authorisation and CSRF checks, as a result, the settings can be updated by u…	CWE-352 CWE-862 Origin Validation Error Missing Authorization	CVE-2021-24779	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195083	7.2	HIGH Network	wpchill	check_\&_log_email	The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL inject…	CWE-89 SQL Injection	CVE-2021-24774	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195084	7.2	HIGH Network	permalink_manager_lite_project	permalink_manager_lite	The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before using it in a SQL statement in the Permalink Manager page, leading to a SQL Injec…	CWE-89 SQL Injection	CVE-2021-24769	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195085	4.8	MEDIUM Network	cimatti	contact_forms	The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages. which could allow high privilege users to p…	CWE-79 Cross-site Scripting	CVE-2021-24744	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195086	9.6	CRITICAL Network	strategy11	formidable_form_builder	The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like <audio>,<video>,<img>,<a> and<button>.This could allow an unauthenticated, remote attacker to explo…	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2021-24884	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195087	5.4	MEDIUM Network	easy_media_download_project	easy_media_download	The Easy Media Download WordPress plugin before 1.1.7 does not escape the text argument of its shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Script…	CWE-79 Cross-site Scripting	CVE-2021-24699	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195088	7.2	HIGH Network	game-server-status_project	game-server-status	The Game Server Status WordPress plugin through 1.0 does not validate or escape the server_id parameter before using it in SQL statement, leading to an Authenticated SQL Injection in an admin page	CWE-89 SQL Injection	CVE-2021-24662	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195089	4.8	MEDIUM Network	cookie-bar_project	cookie-bar	The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unf…	-	CVE-2021-24653	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm

195090	4.8	MEDIUM Network	strategy11	formidable_form_builder	The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form's Labels, allowing high privileged users to perform Cro…	CWE-79 Cross-site Scripting	CVE-2021-24608	2024-11-21 14:53	2021-10-25	Show	GitHub Exploit DB Packet Storm