Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256861	6.8	警告	アドビシステムズレッドハット	-	UNIX 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2203	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

256862	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2202	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

256863	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2201	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

256864	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2168	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

256865	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1295	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

256866	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

256867	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

256868	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

256869	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

256870	1.9	注意	レッドハットサイバートラスト株式会社ターボリナックス Samba Project	-	Samba の mount.cifs における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2948	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194941	4.8	MEDIUM Network	boldgrid	w3_total_cache	The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leadin…	CWE-79 Cross-site Scripting	CVE-2021-24427	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194942	4.8	MEDIUM Network	web-dorado	backup-wd	The Backup by 10Web – Backup and Restore Plugin WordPress plugin through 1.0.20 does not sanitise or escape the tab parameter before outputting it back in the page, leading to a reflected Cross-Site …	-	CVE-2021-24426	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194943	5.4	MEDIUM Network	webfactoryltd	wp_reset	The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot via the admin dashboard, leading to an auth…	CWE-79 Cross-site Scripting	CVE-2021-24424	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194944	5.4	MEDIUM Network	eyecix	jobsearch_wp_job_board	The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use Ja…	-	CVE-2021-24421	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194945	5.4	MEDIUM Network	emarketdesign	request_a_quote	The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quo…	-	CVE-2021-24420	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194946	4.8	MEDIUM Network	wp_youtube_lyte_project	wp_youtube_lyte	The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyte_yt_api_key and lyte_notification settings before outputting them back in the page, allowing high privilege users…	-	CVE-2021-24419	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194947	4.8	MEDIUM Network	smooth_scroll_page_up\/down_buttons_project	smooth_scroll_page_up\/down_buttons	The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS pay…	-	CVE-2021-24418	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194948	6.1	MEDIUM Network	plugin-planet	prismatic	The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed i…	-	CVE-2021-24409	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194949	5.4	MEDIUM Network	plugin-planet	prismatic	The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post ma…	-	CVE-2021-24408	2024-11-21 14:53	2021-07-13	Show	GitHub Exploit DB Packet Storm

194950	5.4	MEDIUM Network	deliciousbrains	wp_offload_ses_lite	The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email's id, subject and recipient, which could lead to…	-	CVE-2021-24494	2024-11-21 14:53	2021-07-6	Show	GitHub Exploit DB Packet Storm