Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257601 7.5 危険 アップル - Apple Mac OS X の FreeRADIUS サーバにおけるネットワーク接続を確立される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0524 2010-04-14 17:10 2010-03-29 Show GitHub Exploit DB Packet Storm
257602 7.8 危険 アップル - Apple Mac OS X の Event Monitor におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0500 2010-04-14 17:09 2010-03-29 Show GitHub Exploit DB Packet Storm
257603 6.5 警告 アップル - Apple Mac OS X の Dovecot におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0535 2010-04-14 17:09 2010-03-29 Show GitHub Exploit DB Packet Storm
257604 7.2 危険 アップル - Apple Mac OS X のディレクトリサービスにおける権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-0498 2010-04-14 17:09 2010-03-29 Show GitHub Exploit DB Packet Storm
257605 6.8 警告 アップル - Apple Mac OS X のディスクイメージにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2010-0497 2010-04-14 17:09 2010-03-29 Show GitHub Exploit DB Packet Storm
257606 6.8 警告 アップル - Apple Mac OS X のディスクイメージにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0065 2010-04-13 15:18 2010-03-29 Show GitHub Exploit DB Packet Storm
257607 0 注意 アップル - Apple Mac OS X の DesktopServices におけるリモートファイルをコピーされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0537 2010-04-13 15:17 2010-03-29 Show GitHub Exploit DB Packet Storm
257608 6.9 警告 アップル - Apple Mac OS X の DesktopServices における disk-quota 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0064 2010-04-13 15:17 2010-03-29 Show GitHub Exploit DB Packet Storm
257609 6.9 警告 アップル
ターボリナックス
CUPS		 - CUPS の _cupsGetlang 関数における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0393 2010-04-13 15:17 2010-03-29 Show GitHub Exploit DB Packet Storm
257610 6.8 警告 アップル - Apple Mac OS X の CoreTypes における任意の JavaScript を実行される脆弱性 CWE-Other
その他 		CVE-2010-0063 2010-04-13 15:17 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195921 4.8 MEDIUM
Network 		yoohooplugins sitewide_notice The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attac… CWE-79
Cross-site Scripting 		CVE-2021-24592 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195922 8.8 HIGH
Network 		blue-admin_project blue-admin The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plu… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24581 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195923 8.8 HIGH
Network 		wow-estore side_menu The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue CWE-89
SQL Injection 		CVE-2021-24580 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195924 8.8 HIGH
Network 		bold-themes bold_page_builder The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a P… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-24579 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195925 5.4 MEDIUM
Network 		wpmanageninja fluentsmtp The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SM… CWE-79
Cross-site Scripting 		CVE-2021-24528 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195926 6.1 MEDIUM
Network 		sharethis dashboard_for_google_analytics The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the p… CWE-79
Cross-site Scripting 		CVE-2021-24438 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195927 6.1 MEDIUM
Network 		realfavicongenerator favicon_by_realfavicongenerator The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scrip… - CVE-2021-24437 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195928 4.8 MEDIUM
Network 		erident_custom_login_and_dashboard_project erident_custom_login_and_dashboard The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is… CWE-79
Cross-site Scripting 		CVE-2021-24658 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195929 8.8 HIGH
Network 		hmplugin hm_multiple_roles The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2021-24602 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195930 4.8 MEDIUM
Network 		simple_banner_project simple_banner The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfilt… CWE-79
Cross-site Scripting 		CVE-2021-24574 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm