Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256951	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

256952	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

256953	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

256954	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

256955	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1578	2010-07-6 19:18	2009-05-8	Show	GitHub Exploit DB Packet Storm

256956	8.5	危険	マイクロソフト	-	Microsoft IIS における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1256	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

256957	4	警告	マイクロソフト	-	Microsoft Windows SharePoint Services におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1264	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

256958	6.9	警告	マイクロソフト	-	Open XML File Format Converter のインストールにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1254	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

256959	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1252	2010-07-5 17:51	2010-06-8	Show	GitHub Exploit DB Packet Storm

256960	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1251	2010-07-5 17:51	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194751	5.4	MEDIUM Network	cminds	tooltip_glossary	The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Sc…	CWE-79 Cross-site Scripting	CVE-2021-24678	2024-11-21 14:53	2021-10-4	Show	GitHub Exploit DB Packet Storm

194752	6.1	MEDIUM Network	codesolz	better_find_and_replace	The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue	-	CVE-2021-24676	2024-11-21 14:53	2021-10-4	Show	GitHub Exploit DB Packet Storm

194753	4.8	MEDIUM Network	dwbooster	appointment_hour_booking	The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when …	-	CVE-2021-24673	2024-11-21 14:53	2021-10-4	Show	GitHub Exploit DB Packet Storm

194754	5.4	MEDIUM Network	wpeverest	user_registration	The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJA…	CWE-79 Cross-site Scripting	CVE-2021-24654	2024-11-21 14:53	2021-10-4	Show	GitHub Exploit DB Packet Storm

194755	8.1	HIGH Network	meowapps	meow_gallery	The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL s…	CWE-89 SQL Injection	CVE-2021-24465	2024-11-21 14:53	2021-10-4	Show	GitHub Exploit DB Packet Storm

194756	5.4	MEDIUM Network	mx_time_zone_clocks_project	mx_time_zone_clocks	The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the time_zone attribute of the mxmtzc_time_zone_clocks shortcode, allowing users with a role as low as Contributor to perform Sto…	-	CVE-2021-24671	2024-11-21 14:53	2021-09-28	Show	GitHub Exploit DB Packet Storm

194757	5.4	MEDIUM Network	status301	coolclock	The CoolClock WordPress plugin before 4.3.5 does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks	-	CVE-2021-24670	2024-11-21 14:53	2021-09-28	Show	GitHub Exploit DB Packet Storm

194758	9.8	CRITICAL Network	podlove	podlove_podcast_publisher	The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an…	-	CVE-2021-24666	2024-11-21 14:53	2021-09-28	Show	GitHub Exploit DB Packet Storm

194759	4.3	MEDIUM Network	wpxpo	postx_-_gutenberg_blocks_for_post_grid	The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post…	NVD-CWE-Other	CVE-2021-24661	2024-11-21 14:53	2021-09-28	Show	GitHub Exploit DB Packet Storm

194760	5.4	MEDIUM Network	wpxpo	postx_-_gutenberg_blocks_for_post_grid	The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting at…	-	CVE-2021-24660	2024-11-21 14:53	2021-09-28	Show	GitHub Exploit DB Packet Storm