Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256961	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0179	2010-12-21 16:10	2010-03-30	Show	GitHub Exploit DB Packet Storm

256962	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0178	2010-12-21 16:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

256963	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0176	2010-12-21 16:06	2010-03-30	Show	GitHub Exploit DB Packet Storm

256964	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTreeSelection の実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0175	2010-12-21 16:02	2010-03-30	Show	GitHub Exploit DB Packet Storm

256965	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0174	2010-12-21 16:01	2010-03-30	Show	GitHub Exploit DB Packet Storm

256966	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0173	2010-12-21 16:00	2010-03-30	Show	GitHub Exploit DB Packet Storm

256967	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Thunderbird/SeaMonkey における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0163	2010-12-21 15:59	2010-03-16	Show	GitHub Exploit DB Packet Storm

256968	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash に脆弱性	CWE-noinfo 情報不足	CVE-2010-2884	2010-12-21 15:57	2010-09-15	Show	GitHub Exploit DB Packet Storm

256969	6.9	警告	CVS レッドハット	-	CVS の rcs.c 内にある apply_rcs_change 関数における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2010-3846	2010-12-21 15:30	2010-11-5	Show	GitHub Exploit DB Packet Storm

256970	10	危険	RealFlex Technologies	-	RealFlex RealWin HMI サービスにバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4142	2010-12-21 15:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196891	7.8	HIGH Local	mcafee	drive_encryption	Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an un…	CWE-269 Improper Privilege Management	CVE-2021-23893	2024-11-21 14:52	2021-10-1	Show	GitHub Exploit DB Packet Storm

196892	4.3	MEDIUM Network	fortinet	fortimanager	An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.	CWE-287 Improper Authentication	CVE-2021-24017	2024-11-21 14:52	2021-10-1	Show	GitHub Exploit DB Packet Storm

196893	6.3	MEDIUM Local	fortinet	fortimanager	An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in …	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2021-24016	2024-11-21 14:52	2021-10-1	Show	GitHub Exploit DB Packet Storm

196894	7.2	HIGH Network	wp-domain-redirect_project	wp-domain-redirect	The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an `editid` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leadin…	-	CVE-2021-24401	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196895	7.2	HIGH Network	wp-display-users_project	wp-display-users	The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL …	-	CVE-2021-24400	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196896	7.2	HIGH Network	ombu	the_sorter	The check_order function of The Sorter WordPress plugin through 1.0 uses an `area_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL inject…	-	CVE-2021-24399	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196897	7.2	HIGH Network	webpsilon	responsive_3d_slider	The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, le…	-	CVE-2021-24398	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196898	7.2	HIGH Network	activemedia	microcopy	The edit functionality in the MicroCopy WordPress plugin through 1.1.0 makes a get request to fetch the related option. The id parameter used is not sanitised, escaped or validated before inserting t…	-	CVE-2021-24397	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196899	7.2	HIGH Network	bestiaweb	gseor	A pageid GET parameter of the GSEOR – WordPress SEO Plugin WordPress plugin through 1.3 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.	-	CVE-2021-24396	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196900	9.8	CRITICAL Network	facebook	parlai	Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar ris…	CWE-502 Deserialization of Untrusted Data	CVE-2021-24040	2024-11-21 14:52	2021-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed