Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256421	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0092	2011-03-11 09:55	2010-03-30	Show	GitHub Exploit DB Packet Storm

256422	5.8	警告	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の Java Web Start または Java Plug-in コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0090	2011-03-11 09:54	2010-03-30	Show	GitHub Exploit DB Packet Storm

256423	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Web Start または Java Plug-in コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0089	2011-03-11 09:52	2010-03-30	Show	GitHub Exploit DB Packet Storm

256424	4.3	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0091	2011-03-11 09:50	2010-03-30	Show	GitHub Exploit DB Packet Storm

256425	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4190	2011-03-10 16:16	2011-02-8	Show	GitHub Exploit DB Packet Storm

256426	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32 モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4189	2011-03-10 16:14	2011-02-8	Show	GitHub Exploit DB Packet Storm

256427	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4188	2011-03-10 16:12	2011-02-8	Show	GitHub Exploit DB Packet Storm

256428	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4187	2011-03-10 16:10	2011-02-8	Show	GitHub Exploit DB Packet Storm

256429	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4093	2011-03-10 16:08	2011-02-8	Show	GitHub Exploit DB Packet Storm

256430	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の compatibility コンポーネントにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-4092	2011-03-10 16:06	2011-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196691	4.8	MEDIUM Network	hu-manity	cookie_notice_\&_compliance_for_gdpr_\/_ccpa	The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high pri…	-	CVE-2021-24569	2024-11-21 14:53	2021-09-28	Show	GitHub Exploit DB Packet Storm

196692	9.8	CRITICAL Network	schiocco	support_board_-_chat_and_help_desk	The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before…	-	CVE-2021-24741	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196693	7.2	HIGH Network	simple_schools_staff_directory_project	simple_schools_staff_directory	The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitr…	-	CVE-2021-24663	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196694	6.1	MEDIUM Network	limit_login_attempts_project	limit_login_attempts	The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-For) of attempted logins before outputtin…	-	CVE-2021-24657	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196695	5.4	MEDIUM Network	gutenslider	gutenslider	The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site…	-	CVE-2021-24640	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196696	8.1	HIGH Network	ffw	omgf	The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary…	-	CVE-2021-24639	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196697	9.1	CRITICAL Network	ffw	omgf	The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file …	-	CVE-2021-24638	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196698	5.4	MEDIUM Network	fontsplugin	fonts	The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scrip…	-	CVE-2021-24637	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196699	8.1	HIGH Network	print_my_blog_project	print_my_blog	The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved …	-	CVE-2021-24636	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

196700	5.4	MEDIUM Network	bootstrapped	visual_link_preview	The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated u…	CWE-862 Missing Authorization	CVE-2021-24635	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm