Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257601 9 危険 シスコシステムズ - Cisco Mediator Framework におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0597 2010-06-16 18:31 2010-05-26 Show GitHub Exploit DB Packet Storm
257602 9 危険 シスコシステムズ - Cisco Mediator Framework における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0596 2010-06-16 18:31 2010-05-26 Show GitHub Exploit DB Packet Storm
257603 10 危険 シスコシステムズ - Cisco Mediator Framework におけるアクセス権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-0595 2010-06-16 18:31 2010-05-26 Show GitHub Exploit DB Packet Storm
257604 4 警告 サイバートラスト株式会社
MIT Kerberos
ターボリナックス
レッドハット		 - MIT Kerberos の kadmind におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0629 2010-06-16 16:17 2010-04-6 Show GitHub Exploit DB Packet Storm
257605 6.4 警告 OpenSSL Project - OpenSSL の EVP_PKEY_verify_recover 関数における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1633 2010-06-15 18:26 2010-06-1 Show GitHub Exploit DB Packet Storm
257606 3.6 注意 レッドハット - RHEL の yum-rhn-plugin における Red Hat Network プロファイルを閲覧される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1439 2010-06-15 18:25 2010-06-1 Show GitHub Exploit DB Packet Storm
257607 9.3 危険 アドビシステムズ - Adobe Photoshop CS4 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1296 2010-06-15 18:25 2010-05-26 Show GitHub Exploit DB Packet Storm
257608 5 警告 日立 - Groupmax World Wide Web Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-06-14 16:24 2010-05-26 Show GitHub Exploit DB Packet Storm
257609 4.3 警告 日立 - Hitachi Web Server の SSL クライアント認証における CRL 失効確認不可の脆弱性 CWE-287
不適切な認証 		- 2010-06-14 16:24 2010-05-17 Show GitHub Exploit DB Packet Storm
257610 5 警告 日立 - TP1/Message Control におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		- 2010-06-14 16:23 2010-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195891 5.7 MEDIUM
Network 		metagauss download_plugin The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subscribers, to activate… CWE-352
 Origin Validation Error 		CVE-2021-24703 2024-11-21 14:53 2021-11-24 Show GitHub Exploit DB Packet Storm
195892 4.8 MEDIUM
Network 		incsub forminator The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilter… - CVE-2021-24700 2024-11-21 14:53 2021-11-24 Show GitHub Exploit DB Packet Storm
195893 4.3 MEDIUM
Network 		feataholic maz_loader The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack - CVE-2021-24668 2024-11-21 14:53 2021-11-24 Show GitHub Exploit DB Packet Storm
195894 7.5 HIGH
Network 		imagestowebp_project images_to_webp The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue - CVE-2021-24644 2024-11-21 14:53 2021-11-24 Show GitHub Exploit DB Packet Storm
195895 8.1 HIGH
Network 		imagestowebp_project images_to_webp The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service… - CVE-2021-24641 2024-11-21 14:53 2021-11-24 Show GitHub Exploit DB Packet Storm
195896 4.8 MEDIUM
Network 		tammersoft shared_files The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even wh… - CVE-2021-24856 2024-11-21 14:53 2021-11-17 Show GitHub Exploit DB Packet Storm
195897 5.4 MEDIUM
Network 		qr_redirector_project qr_redirector The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Script… - CVE-2021-24854 2024-11-21 14:53 2021-11-17 Show GitHub Exploit DB Packet Storm
195898 4.3 MEDIUM
Network 		qr_redirector_project qr_redirector The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated us… CWE-352
 Origin Validation Error 		CVE-2021-24853 2024-11-21 14:53 2021-11-17 Show GitHub Exploit DB Packet Storm
195899 6.5 MEDIUM
Network 		mousewheel_smooth_scroll_project mousewheel_smooth_scroll The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack - CVE-2021-24852 2024-11-21 14:53 2021-11-17 Show GitHub Exploit DB Packet Storm
195900 4.3 MEDIUM
Network 		insert_pages_project insert_pages The Insert Pages WordPress plugin before 3.7.0 allows users with a role as low as Contributor to access content and metadata from arbitrary posts/pages regardless of their author and status (ie priva… CWE-862
 Missing Authorization 		CVE-2021-24851 2024-11-21 14:53 2021-11-17 Show GitHub Exploit DB Packet Storm