Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255571 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品の nsGenericDOMDataNode::SetTextInternal 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1196 2011-01-5 14:39 2010-06-22 Show GitHub Exploit DB Packet Storm
255572 9.3 危険 Mozilla Foundation
オラクル		 - 複数の Mozilla 製品の nsCycleCollector::MarkRoots 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0183 2011-01-5 14:19 2010-06-22 Show GitHub Exploit DB Packet Storm
255573 7.5 危険 レッドハット - Red Hat Enterprise MRG の Management Console における任意のジョブを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4179 2011-01-4 16:28 2010-11-30 Show GitHub Exploit DB Packet Storm
255574 7.8 危険 シスコシステムズ - 複数の CIsco 製品上で稼働する remote-access IPSec VPN の実装における有効なグループ名を列挙される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4354 2011-01-4 16:18 2010-09-22 Show GitHub Exploit DB Packet Storm
255575 4 警告 Pidgin
オラクル		 - Pidgin の libpurple 内にある oscar プロトコルプラグインの clientautoresp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2528 2011-01-4 16:14 2010-07-30 Show GitHub Exploit DB Packet Storm
255576 7.2 危険 VMware - 複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4297 2010-12-27 15:40 2010-12-2 Show GitHub Exploit DB Packet Storm
255577 7.2 危険 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4296 2010-12-27 15:38 2010-12-2 Show GitHub Exploit DB Packet Storm
255578 6.9 警告 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-4295 2010-12-27 15:36 2010-12-2 Show GitHub Exploit DB Packet Storm
255579 9.3 危険 VMware - 複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4294 2010-12-27 15:33 2010-12-2 Show GitHub Exploit DB Packet Storm
255580 2.1 注意 アップル - Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0530 2010-12-27 15:07 2010-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195051 8.8 HIGH
Network 		wpdeveloper simple_301_redirects The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's red… - CVE-2021-24352 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195052 6.1 MEDIUM
Network 		posimyth the_plus_addons_for_elementor The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scriptin… - CVE-2021-24351 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195053 6.1 MEDIUM
Network 		bestwebsoft visitors_online The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validation o… - CVE-2021-24350 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195054 6.1 MEDIUM
Network 		gallery_from_files_project gallery_from_files This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when… - CVE-2021-24349 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195055 5.3 MEDIUM
Network 		posimyth the_plus_addons_for_elementor The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbit… CWE-287
Improper Authentication 		CVE-2021-24359 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195056 7.2 HIGH
Network 		wow-estore side_menu The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users takes the did GET parameter and uses it into an SQL statement w… - CVE-2021-24348 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195057 8.8 HIGH
Network 		smartypantsplugins sp_project_\&_document_manager The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server f… - CVE-2021-24347 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195058 5.4 MEDIUM
Network 		stock_in_\&_out_project stock_in_\&_out The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped befor… CWE-79
Cross-site Scripting 		CVE-2021-24346 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195059 6.6 MEDIUM
Network 		sendit_project sendit The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the id_lista POST parameter before… - CVE-2021-24345 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm
195060 8.8 HIGH
Network 		xllentech english_islamic_calendar When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being use… - CVE-2021-24341 2024-11-21 14:52 2021-06-14 Show GitHub Exploit DB Packet Storm