Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257591	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3797	2010-12-3 13:12	2010-11-16	Show	GitHub Exploit DB Packet Storm

257592	4.3	警告	アップル	-	Apple Mac OS X の Safari RSS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3796	2010-12-3 13:10	2010-11-16	Show	GitHub Exploit DB Packet Storm

257593	6	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスレッドハット	-	PostgreSQL の PL/perl および PL/Tcl 実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3433	2010-12-2 17:11	2010-10-4	Show	GitHub Exploit DB Packet Storm

257594	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2808	2010-12-2 17:08	2010-08-19	Show	GitHub Exploit DB Packet Storm

257595	5	警告	アップルサイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType の Standard Encoding Accented Character の呼び出しにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3054	2010-12-2 16:34	2010-08-19	Show	GitHub Exploit DB Packet Storm

257596	4.3	警告	アップルターボリナックス FreeType Project	-	FreeType の bdf/bdflib.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3053	2010-12-2 16:28	2010-08-19	Show	GitHub Exploit DB Packet Storm

257597	5	警告	アップル	-	Apple Mac OS X の Printing におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3784	2010-12-1 16:14	2010-11-16	Show	GitHub Exploit DB Packet Storm

257598	6.8	警告	アップル	-	Apple Mac OS X のパスワードサーバにおけるパスワードの認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3783	2010-12-1 16:12	2010-11-16	Show	GitHub Exploit DB Packet Storm

257599	6.8	警告	アップルターボリナックス FreeType Project オラクル	-	FreeType における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-2807	2010-12-1 16:00	2010-08-19	Show	GitHub Exploit DB Packet Storm

257600	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の t42_parse_sfnts 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2806	2010-12-1 15:58	2010-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197221	5.4	MEDIUM Network	gutenslider	gutenslider	The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site…	-	CVE-2021-24640	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197222	8.1	HIGH Network	ffw	omgf	The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary…	-	CVE-2021-24639	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197223	9.1	CRITICAL Network	ffw	omgf	The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file …	-	CVE-2021-24638	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197224	5.4	MEDIUM Network	fontsplugin	fonts	The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scrip…	-	CVE-2021-24637	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197225	8.1	HIGH Network	print_my_blog_project	print_my_blog	The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved …	-	CVE-2021-24636	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197226	5.4	MEDIUM Network	bootstrapped	visual_link_preview	The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated u…	CWE-862 Missing Authorization	CVE-2021-24635	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197227	5.4	MEDIUM Network	wbolt	donate_with_qrcode	The Donate With QRCode WordPress plugin before 1.4.5 does not sanitise or escape its QRCode Image setting, which result into a Stored Cross-Site Scripting (XSS). Furthermore, the plugin also does not…	-	CVE-2021-24618	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197228	4.8	MEDIUM Network	dfactory	post_views_counter	The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the f…	-	CVE-2021-24613	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197229	4.8	MEDIUM Network	wp_mapa_politico_espana_project	wp_mapa_politico_espana	The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Sc…	-	CVE-2021-24609	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm

197230	8.8	HIGH Network	offshorewebmaster	availability_calendar	The Availability Calendar WordPress plugin before 1.2.1 does not escape the category attribute from its shortcode before using it in a SQL statement, leading to a SQL Injection issue, which can be ex…	-	CVE-2021-24606	2024-11-21 14:53	2021-09-20	Show	GitHub Exploit DB Packet Storm