Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256831 7.5 危険 オラクル - Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0897 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
256832 10 危険 オラクル - Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0888 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
256833 5 警告 サン・マイクロシステムズ
Pidgin
レッドハット		 - Pidgin の gtkimhtml.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0423 2010-05-14 18:39 2010-02-18 Show GitHub Exploit DB Packet Storm
256834 4.3 警告 サン・マイクロシステムズ
Pidgin
レッドハット		 - Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0420 2010-05-14 18:38 2010-02-18 Show GitHub Exploit DB Packet Storm
256835 7.5 危険 Carnegie Mellon University (Project Cyrus)
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
オラクル
レッドハット		 - Cyrus SASL ライブラリにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0688 2010-05-14 18:37 2009-05-15 Show GitHub Exploit DB Packet Storm
256836 7.5 危険 サン・マイクロシステムズ
GNOME Project
レッドハット		 - Evolution Data Server (別名 evolution-data-server) における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0587 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
256837 5.8 警告 サン・マイクロシステムズ
GNOME Project
レッドハット		 - Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0582 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
256838 1.2 注意 日本電気
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
OpenSSL Project
レッドハット		 - RSA key reconstruction vulnerability - CVE-2007-3108 2010-05-14 18:37 2007-08-16 Show GitHub Exploit DB Packet Storm
256839 5 警告 ヒューレット・パッカード
サイバートラスト株式会社
OpenSSL Project
ターボリナックス
レッドハット		 - OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4355 2010-05-13 17:21 2010-01-13 Show GitHub Exploit DB Packet Storm
256840 9.3 危険 日立 - XMAP3 における任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		- 2010-05-13 15:14 2010-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194971 5.4 MEDIUM
Network 		themify portfolio_post Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS) vulnerabilities allowing low-privileged … CWE-79
Cross-site Scripting 		CVE-2021-24129 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194972 5.4 MEDIUM
Network 		wpdarko team_members Unvalidated input and lack of output encoding in the Team Members WordPress plugin, versions before 5.0.4, lead to Cross-site scripting vulnerabilities allowing medium-privileged authenticated attack… CWE-79
Cross-site Scripting 		CVE-2021-24128 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194973 5.4 MEDIUM
Network 		caseproof thirstyaffiliates_affiliate_link_manager Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS… CWE-79
Cross-site Scripting 		CVE-2021-24127 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194974 5.4 MEDIUM
Network 		enviragallery envira_gallery Unvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did not properly sanitise the images metadata (namely title) before outputting them… CWE-79
Cross-site Scripting 		CVE-2021-24126 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194975 7.2 HIGH
Network 		contact_form_submissions_project contact_form_submissions Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7_contact_form GET parameter when submitting a filter request as a high privile… CWE-89
SQL Injection 		CVE-2021-24125 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194976 6.1 MEDIUM
Network 		terryl wp_shieldon Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is show… CWE-79
Cross-site Scripting 		CVE-2021-24124 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194977 7.2 HIGH
Network 		blubrry powerpress Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privile… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-24123 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194978 7.5 HIGH
Network 		facebook proxygen
mvfst 		A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assertion. Per QUIC specification, this particular message sho… CWE-617
 Reachable Assertion 		CVE-2021-24029 2024-11-21 14:52 2021-03-16 Show GitHub Exploit DB Packet Storm
194979 7.8 HIGH
Local 		microsoft high_efficiency_video_coding HEVC Video Extensions Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-24110 2024-11-21 14:52 2021-03-12 Show GitHub Exploit DB Packet Storm
194980 7.8 HIGH
Local 		microsoft office
365_apps 		Microsoft Office Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-24108 2024-11-21 14:52 2021-03-12 Show GitHub Exploit DB Packet Storm