Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257451 9.3 危険 マイクロソフト - Microsoft Publisher の pubconv.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2570 2011-01-17 15:16 2010-12-14 Show GitHub Exploit DB Packet Storm
257452 9.3 危険 マイクロソフト - Microsoft Publisher の pubconv.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2569 2011-01-17 15:14 2010-12-14 Show GitHub Exploit DB Packet Storm
257453 4.9 警告 マイクロソフト - Microsoft Windows Server 2008 の Hyper-V におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3960 2011-01-17 15:12 2010-12-14 Show GitHub Exploit DB Packet Storm
257454 5.4 警告 マイクロソフト - 複数の Microsoft 製品の Netlogon RPC Service におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2742 2011-01-17 15:09 2010-12-14 Show GitHub Exploit DB Packet Storm
257455 7.2 危険 マイクロソフト - 複数の Microsoft 製品の Consent User Interface における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3961 2011-01-17 15:06 2010-12-14 Show GitHub Exploit DB Packet Storm
257456 7.2 危険 マイクロソフト - Microsoft Windows 製品の Routing and Remote Access NDProxy コンポーネントにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3963 2011-01-17 15:03 2010-12-14 Show GitHub Exploit DB Packet Storm
257457 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3944 2011-01-17 14:45 2010-12-14 Show GitHub Exploit DB Packet Storm
257458 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3943 2011-01-17 14:38 2010-12-14 Show GitHub Exploit DB Packet Storm
257459 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2010-3942 2011-01-17 14:35 2010-12-14 Show GitHub Exploit DB Packet Storm
257460 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3941 2011-01-17 14:29 2010-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196981 6.1 MEDIUM
Network 		wbolt smart_seo_tool The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a… - CVE-2021-24976 2024-11-21 14:54 2022-01-24 Show GitHub Exploit DB Packet Storm
196982 5.4 MEDIUM
Network 		adtribes product_feed_pro_for_woocommerce The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could … - CVE-2021-24974 2024-11-21 14:54 2022-01-24 Show GitHub Exploit DB Packet Storm
196983 5.7 MEDIUM
Network 		etoilewebdesign ultimate_faq The Ultimate FAQ WordPress plugin before 2.1.2 does not have capability and CSRF checks in the ewd_ufaq_welcome_add_faq and ewd_ufaq_welcome_add_faq_page AJAX actions, available to any authenticated … CWE-352
 Origin Validation Error 		CVE-2021-24968 2024-11-21 14:54 2022-01-24 Show GitHub Exploit DB Packet Storm
196984 5.4 MEDIUM
Network 		fivestarplugins five_star_restaurant_reservations The Five Star Restaurant Reservations WordPress plugin before 2.4.8 does not have capability and CSRF checks in the rtb_welcome_set_schedule AJAX action, allowing any authenticated users to call it. … - CVE-2021-24965 2024-11-21 14:54 2022-01-24 Show GitHub Exploit DB Packet Storm
196985 8.0 HIGH
Network 		wp_extra_file_types_project wp_extra_file_types The WP Extra File Types WordPress plugin before 0.5.1 does not have CSRF check when saving its settings, nor sanitise and escape some of them, which could allow attackers to make a logged in admin ch… - CVE-2021-24936 2024-11-21 14:54 2022-01-24 Show GitHub Exploit DB Packet Storm
196986 6.1 MEDIUM
Network 		brevo newsletter\
_smtp\
_email_marketing_and_subscribe 		The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.25 does not escape the sib-statistics-date parameter before outputting it back in an attribute, lea… - CVE-2021-24923 2024-11-21 14:54 2022-01-24 Show GitHub Exploit DB Packet Storm
196987 5.4 MEDIUM
Network 		pluginops landing_page The Landing Page Builder WordPress plugin before 1.4.9.6 was affected by a reflected XSS in page-builder-add on the ulpb_post admin page. - CVE-2021-25067 2024-11-21 14:54 2022-01-17 Show GitHub Exploit DB Packet Storm
196988 5.4 MEDIUM
Network 		smashballoon smash_balloon_social_post_feed The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page. - CVE-2021-25065 2024-11-21 14:54 2022-01-17 Show GitHub Exploit DB Packet Storm
196989 5.4 MEDIUM
Network 		wpbookingsystem wp_booking_system The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page. - CVE-2021-25061 2024-11-21 14:54 2022-01-17 Show GitHub Exploit DB Packet Storm
196990 5.4 MEDIUM
Network 		webnus modern_events_calendar_lite The Modern Events Calendar Lite WordPress plugin before 6.2.0 alloed any logged-in user, even a subscriber user, may add a category whose parameters are incorrectly escaped in the admin panel, leadin… - CVE-2021-25046 2024-11-21 14:54 2022-01-17 Show GitHub Exploit DB Packet Storm