Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256511	5.8	警告	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0831	2011-02-3 14:52	2010-06-18	Show	GitHub Exploit DB Packet Storm

256512	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3652	2011-02-2 15:07	2010-11-4	Show	GitHub Exploit DB Packet Storm

256513	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3650	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

256514	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3649	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

256515	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3648	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

256516	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3647	2011-02-2 15:05	2010-11-4	Show	GitHub Exploit DB Packet Storm

256517	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3646	2011-02-2 15:05	2010-11-4	Show	GitHub Exploit DB Packet Storm

256518	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3645	2011-02-2 15:05	2010-11-4	Show	GitHub Exploit DB Packet Storm

256519	10	危険	アドバンテック株式会社	-	Advantech Studio Test Web Server にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0488	2011-02-2 15:00	2011-01-13	Show	GitHub Exploit DB Packet Storm

256520	10	危険	WellinTech	-	WellinTech KingView 6.53 にヒープオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0406	2011-02-2 14:59	2011-01-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196771	6.1	MEDIUM Network	email-subscriber_project	email-subscriber	The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST…	CWE-79 Cross-site Scripting	CVE-2021-24556	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196772	8.8	HIGH Network	roosty	diary-availability-calendar	The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or…	-	CVE-2021-24555	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196773	7.2	HIGH Network	freelancetoindia	paytm-pay	The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authent…	-	CVE-2021-24554	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196774	7.2	HIGH Network	timeline_calendar_project	timeline_calendar	The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL…	-	CVE-2021-24553	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196775	7.2	HIGH Network	simple_events_calendar_project	simple_events_calendar	The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parameter before using it in a SQL statement when deleting events, leading to an auth…	-	CVE-2021-24552	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196776	9.8	CRITICAL Network	edit_comments_project	edit_comments	The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter before using it in a SQL statement, leading to a SQL injection issue	-	CVE-2021-24551	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196777	7.2	HIGH Network	broken_link_manager_project	broken_link_manager	The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an aut…	-	CVE-2021-24550	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196778	4.9	MEDIUM Network	aceide_project	aceide	The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, such as to read arbitrary files from the s…	-	CVE-2021-24549	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196779	5.4	MEDIUM Network	kn_fix_your_title_project	kn_fix_your_title	The KN Fix Your Title WordPress plugin through 1.0.1 was vulnerable to Authenticated Stored XSS in the separator field.	-	CVE-2021-24547	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

196780	4.8	MEDIUM Network	webfactoryltd	maintenance	The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site Scripting payload in them (even when the un…	CWE-79 Cross-site Scripting	CVE-2021-24533	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed