Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255921	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0178	2010-12-21 16:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

255922	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0176	2010-12-21 16:06	2010-03-30	Show	GitHub Exploit DB Packet Storm

255923	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTreeSelection の実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0175	2010-12-21 16:02	2010-03-30	Show	GitHub Exploit DB Packet Storm

255924	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0174	2010-12-21 16:01	2010-03-30	Show	GitHub Exploit DB Packet Storm

255925	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0173	2010-12-21 16:00	2010-03-30	Show	GitHub Exploit DB Packet Storm

255926	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Thunderbird/SeaMonkey における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0163	2010-12-21 15:59	2010-03-16	Show	GitHub Exploit DB Packet Storm

255927	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash に脆弱性	CWE-noinfo 情報不足	CVE-2010-2884	2010-12-21 15:57	2010-09-15	Show	GitHub Exploit DB Packet Storm

255928	6.9	警告	CVS レッドハット	-	CVS の rcs.c 内にある apply_rcs_change 関数における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2010-3846	2010-12-21 15:30	2010-11-5	Show	GitHub Exploit DB Packet Storm

255929	10	危険	RealFlex Technologies	-	RealFlex RealWin HMI サービスにバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4142	2010-12-21 15:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

255930	4.3	警告	Webmin Project オラクル	-	Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4568	2010-12-21 15:14	2010-01-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195031	4.8	MEDIUM Network	print-o-matic_project	print-o-matic	The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attack…	-	CVE-2021-24710	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195032	4.8	MEDIUM Network	wp_all_export_project	wp_all_export	The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to per…	-	CVE-2021-24708	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195033	4.8	MEDIUM Network	qwizcards_project	qwizcards	The Qwizcards – online quizzes and flashcards WordPress plugin before 3.62 does not properly sanitize and escape some of its settings, allowing high privilege users to perform Cross-Site Scripting at…	-	CVE-2021-24706	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195034	4.8	MEDIUM Network	quiz_tool_lite_project	quiz_tool_lite	The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perfor…	-	CVE-2021-24701	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195035	4.3	MEDIUM Network	tipsandtricks-hq	simple_download_monitor	The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the dow…	NVD-CWE-noinfo	CVE-2021-24698	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195036	6.1	MEDIUM Network	tipsandtricks-hq	simple_download_monitor	The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sdm_stats_end_date POST parameters before outputting them bac…	-	CVE-2021-24697	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195037	7.5	HIGH Network	tipsandtricks-hq	simple_download_monitor	The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to down…	-	CVE-2021-24695	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195038	6.5	MEDIUM Network	genie_wp_favicon_project	genie_wp_favicon	The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack	CWE-352 Origin Validation Error	CVE-2021-24674	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195039	8.8	HIGH Network	feataholic	maz_loader	The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr shortcode, which allows users with a role as low as Contributor t…	-	CVE-2021-24669	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

195040	9.0	CRITICAL Network	tipsandtricks-hq	simple_download_monitor	The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages, which could allow users with a role as low as Contributor …	-	CVE-2021-24693	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm