Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256931 4.3 警告 IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
ヒューレット・パッカード
ターボリナックス
レッドハット		 - Apache の mod_proxy_ftp における UTF-7 エンコードに関するクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0005 2010-04-28 15:18 2008-01-11 Show GitHub Exploit DB Packet Storm
256932 10 危険 IntelliCom Innovation AB - IntelliCom NetBiter デバイスにおけるデフォルトパスワードの問題 CWE-255
証明書・パスワード管理 		CVE-2009-4463 2010-04-27 16:10 2010-04-7 Show GitHub Exploit DB Packet Storm
256933 9.3 危険 Foxit Software Inc - Foxit Reader に任意のコード実行が可能な脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1239 2010-04-27 16:10 2010-04-6 Show GitHub Exploit DB Packet Storm
256934 10 危険 ヒューレット・パッカード - Broadcom NetXtreme 管理用ファームウェアにバッファオーバーフローの脆弱性 CWE-noinfo
情報不足 		CVE-2010-0104 2010-04-27 16:09 2010-03-31 Show GitHub Exploit DB Packet Storm
256935 6.8 警告 アップル - AirPort Utility におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2822 2010-04-27 16:09 2010-03-31 Show GitHub Exploit DB Packet Storm
256936 9.3 危険 アップル - Apple Safari の ColorSync における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0040 2010-04-27 15:20 2010-03-15 Show GitHub Exploit DB Packet Storm
256937 4 警告 Squid-cache.org
サイバートラスト株式会社
ターボリナックス
レッドハット		 - Squid の lib/rfc1035.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0308 2010-04-27 15:20 2010-01-28 Show GitHub Exploit DB Packet Storm
256938 6.8 警告 アップル - Apple Mac OS X の QuickDraw Manager におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2837 2010-04-27 15:20 2009-11-9 Show GitHub Exploit DB Packet Storm
256939 5 警告 Squid-cache.org
サイバートラスト株式会社
ターボリナックス
レッドハット		 - Squid の strListGetItem 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2855 2010-04-27 15:19 2009-08-18 Show GitHub Exploit DB Packet Storm
256940 4.3 警告 アップル
サイバートラスト株式会社
LibTIFF
サン・マイクロシステムズ
レッドハット		 - libtiff の LZWDecodeCompat 関数におけるバッファアンダーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2285 2010-04-27 15:19 2009-07-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194951 8.8 HIGH
Network 		webnus modern_events_calendar_lite Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mec[post_id] POST parameter in the mec_fes_form AJAX action when logged in as an au… CWE-89
SQL Injection 		CVE-2021-24149 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194952 9.8 CRITICAL
Network 		inspireui mstore_api A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cook… CWE-287
Improper Authentication 		CVE-2021-24148 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194953 5.4 MEDIUM
Network 		webnus modern_events_calendar_lite Unvalidated input and lack of output encoding in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not sanitise the mic_comment field (Notes on time) when adding/editing a… CWE-79
Cross-site Scripting 		CVE-2021-24147 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194954 7.5 HIGH
Network 		webnus modern_events_calendar_lite Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to expor… CWE-862
 Missing Authorization 		CVE-2021-24146 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194955 7.2 HIGH
Network 		webnus modern_events_calendar_lite Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using… - CVE-2021-24145 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194956 7.8 HIGH
Local 		ciphercoin contact_form_7_database_addon Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2021-24144 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194957 8.8 HIGH
Network 		accesspressthemes accesspress_social_icons Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injectio… CWE-89
SQL Injection 		CVE-2021-24143 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194958 7.2 HIGH
Network 		webfactoryltd 301_redirects Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege u… CWE-89
SQL Injection 		CVE-2021-24142 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194959 7.2 HIGH
Network 		sigmaplugin advanced_database_cleaner Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users (admin+) to perform SQL attacks. CWE-89
SQL Injection 		CVE-2021-24141 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm
194960 7.2 HIGH
Network 		connekthq ajax_load_more Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test. CWE-89
SQL Injection 		CVE-2021-24140 2024-11-21 14:52 2021-03-19 Show GitHub Exploit DB Packet Storm