Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 4:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257381 2.1 注意 サイバートラスト株式会社
レッドハット		 - lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性 - CVE-2005-2672 2010-02-17 11:43 2005-08-22 Show GitHub Exploit DB Packet Storm
257382 9.3 危険 アップル - Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0037 2010-02-16 11:45 2010-01-19 Show GitHub Exploit DB Packet Storm
257383 9.3 危険 アップル - Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0036 2010-02-16 11:45 2010-01-19 Show GitHub Exploit DB Packet Storm
257384 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-4003 2010-02-16 11:44 2010-01-19 Show GitHub Exploit DB Packet Storm
257385 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4002 2010-02-16 11:44 2010-01-19 Show GitHub Exploit DB Packet Storm
257386 6.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel における競合状態の脆弱性 CWE-362
競合状態 		CVE-2009-3547 2010-02-16 11:44 2009-11-3 Show GitHub Exploit DB Packet Storm
257387 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の netlink サブシステムにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2005-4881 2010-02-16 11:43 2009-10-19 Show GitHub Exploit DB Packet Storm
257388 4.7 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の execve 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2848 2010-02-16 11:43 2009-08-18 Show GitHub Exploit DB Packet Storm
257389 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の do_sigaltstack 関数における情報漏えいの脆弱性 CWE-noinfo
情報不足 		CVE-2009-2847 2010-02-16 11:43 2009-08-18 Show GitHub Exploit DB Packet Storm
257390 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の personality サブシステムにおける NULL ポインタ参照の脆弱性 CWE-16
環境設定 		CVE-2009-1895 2010-02-16 11:43 2009-07-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194681 4.8 MEDIUM
Network 		wp_sitemap_page_project wp_sitemap_page The WP Sitemap Page WordPress plugin before 1.7.0 does not properly sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when … CWE-79
Cross-site Scripting 		CVE-2021-24715 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194682 5.4 MEDIUM
Network 		flat_preloader_project flat_preloader The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its settings, as well as does not sanitise and escape them, which could allow attackers to a make logged in … - CVE-2021-24685 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194683 5.4 MEDIUM
Network 		wpkube cool_tag_cloud The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-… CWE-79
Cross-site Scripting 		CVE-2021-24682 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194684 4.8 MEDIUM
Network 		sonaar mp3_audio_player_for_music\
_radio_\&_podcast 		The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to pe… CWE-79
Cross-site Scripting 		CVE-2021-24624 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194685 4.3 MEDIUM
Network 		wpplugin accept_donations_with_paypal The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and … - CVE-2021-24572 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194686 4.3 MEDIUM
Network 		wpplugin accept_donations_with_paypal The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create a new button is lacking a CSRF check. An… - CVE-2021-24570 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194687 4.8 MEDIUM
Network 		dazzlersoftware coming_soon\
_under_construction_\&_maintenance_mode_by_dazzler 		The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming … - CVE-2021-24539 2024-11-21 14:53 2021-11-1 Show GitHub Exploit DB Packet Storm
194688 6.1 MEDIUM
Network 		yop-poll yop-poll The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting CWE-79
Cross-site Scripting 		CVE-2021-24885 2024-11-21 14:53 2021-10-25 Show GitHub Exploit DB Packet Storm
194689 4.8 MEDIUM
Network 		great-quotes_project great-quotes The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks … CWE-79
Cross-site Scripting 		CVE-2021-24785 2024-11-21 14:53 2021-10-25 Show GitHub Exploit DB Packet Storm
194690 6.5 MEDIUM
Network 		wp_debugging_project wp_debugging The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing any authorisation and CSRF checks, as a result, the settings can be updated by u… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2021-24779 2024-11-21 14:53 2021-10-25 Show GitHub Exploit DB Packet Storm