Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256541 9.3 危険 マイクロソフト - Microsoft Office Access の FieldList の ActiveX コントロール における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1881 2010-07-30 17:41 2010-07-13 Show GitHub Exploit DB Packet Storm
256542 9.3 危険 マイクロソフト - Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0814 2010-07-30 17:41 2010-07-13 Show GitHub Exploit DB Packet Storm
256543 2.1 注意 日立
CA Technologies		 - Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2157 2010-07-29 18:57 2010-06-3 Show GitHub Exploit DB Packet Storm
256544 3.5 注意 ターボリナックス
Samba Project		 - Samba の smbd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0926 2010-07-29 18:57 2010-02-24 Show GitHub Exploit DB Packet Storm
256545 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2597 2010-07-28 19:31 2010-07-2 Show GitHub Exploit DB Packet Storm
256546 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の TIFFRGBAImageGet 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2483 2010-07-28 19:31 2010-07-6 Show GitHub Exploit DB Packet Storm
256547 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の TIFFExtractData マクロにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2481 2010-07-28 19:31 2010-07-6 Show GitHub Exploit DB Packet Storm
256548 5 警告 レッドハット - iSNS 実装におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2221 2010-07-28 19:30 2010-07-8 Show GitHub Exploit DB Packet Storm
256549 7.5 危険 シスコシステムズ - Cisco Content Services Switch における HTTP Request Smuggling 攻撃の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1576 2010-07-27 17:29 2010-07-2 Show GitHub Exploit DB Packet Storm
256550 7.5 危険 シスコシステムズ - Cisco Content Services Switch における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1575 2010-07-27 17:28 2010-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194981 7.2 HIGH
Network 		comment_highlighter_project comment_highlighter A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. CWE-89
SQL Injection 		CVE-2021-24393 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
194982 7.2 HIGH
Network 		swiftcrm club-management-software An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injectio… CWE-89
SQL Injection 		CVE-2021-24392 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
194983 8.8 HIGH
Network 		cashtomer_project cashtomer An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. CWE-89
SQL Injection 		CVE-2021-24391 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
194984 7.2 HIGH
Network 		alipay_project alipay A proid GET parameter of the WordPress???Alipay|???Tenpay|??PayPal???? WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited… - CVE-2021-24390 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
194985 8.8 HIGH
Network 		jiangqie official_website_mini_program The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues CWE-89
SQL Injection 		CVE-2021-24303 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
194986 7.8 HIGH
Local 		oculus desktop Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue a… CWE-269
 Improper Privilege Management 		CVE-2021-24038 2024-11-21 14:52 2021-08-20 Show GitHub Exploit DB Packet Storm
194987 4.3 MEDIUM
Network 		shantz_wordpress_qotd_project shantz_wordpress_qotd The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values. CWE-352
 Origin Validation Error 		CVE-2021-24380 2024-11-21 14:52 2021-08-16 Show GitHub Exploit DB Packet Storm
194988 4.9 MEDIUM
Network 		10web photo_gallery The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put i… - CVE-2021-24363 2024-11-21 14:52 2021-08-16 Show GitHub Exploit DB Packet Storm
194989 6.1 MEDIUM
Network 		10web photo_gallery The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded SVG files added to a gallery do not contain malicious content. As a result, user… - CVE-2021-24362 2024-11-21 14:52 2021-08-16 Show GitHub Exploit DB Packet Storm
194990 6.1 MEDIUM
Network 		tagdiv newsmag The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability. - CVE-2021-24304 2024-11-21 14:52 2021-08-9 Show GitHub Exploit DB Packet Storm