Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257681	7.1	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の ext4_fill_flex_info 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-4307	2010-05-21 18:22	2009-12-13	Show	GitHub Exploit DB Packet Storm

257682	7.1	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の mac80211 サブシステムにおけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2009-4027	2010-05-21 18:22	2009-12-2	Show	GitHub Exploit DB Packet Storm

257683	5	警告	レッドハット	-	Linux SCSI target framework および iSCSI Enterprise Target におけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2010-0743	2010-05-21 16:13	2010-04-8	Show	GitHub Exploit DB Packet Storm

257684	7.5	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の LWRES 解析部におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0304	2010-05-21 16:13	2010-01-27	Show	GitHub Exploit DB Packet Storm

257685	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の SMB および SMB2 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4377	2010-05-21 16:13	2009-12-17	Show	GitHub Exploit DB Packet Storm

257686	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の DCERPC/NT 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3550	2010-05-21 16:12	2009-10-26	Show	GitHub Exploit DB Packet Storm

257687	7.1	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の Infiniband 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2563	2010-05-20 18:30	2009-07-20	Show	GitHub Exploit DB Packet Storm

257688	5	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の AFS 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2562	2010-05-20 18:29	2009-07-20	Show	GitHub Exploit DB Packet Storm

257689	5	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2560	2010-05-20 18:29	2009-07-20	Show	GitHub Exploit DB Packet Storm

257690	10	危険	サン・マイクロシステムズサイバートラスト株式会社 RealVNC レッドハット	-	RealVNC VNC Viewer コンポーネントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4770	2010-05-20 18:03	2009-01-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195581	8.8	HIGH Network	core_tweaks_wp_setup_project	core_tweaks_wp_setup	The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in…	-	CVE-2021-24803	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

195582	4.3	MEDIUM Network	infornweb	logo_showcase_with_slick_slider	The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as …	-	CVE-2021-24730	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

195583	8.8	HIGH Network	orange-form_project	orange-form	In the Orange Form WordPress plugin through 1.0, the process_bulk_action() function in "admin/orange-form-email.php" performs an unprepared SQL query with an unsanitized parameter ($id). Only admin c…	-	CVE-2021-24704	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

195584	4.9	MEDIUM Network	wpeverest	contact_form	The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack	CWE-22 Path Traversal	CVE-2021-24689	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

195585	4.3	MEDIUM Network	orange-form_project	orange-form	The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls, for example the or_delete_filed one which is available to both unauthenticated…	CWE-352 Origin Validation Error	CVE-2021-24688	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

195586	9.8	CRITICAL Network	accesspressthemes	accessbuddy accesspress_basic accesspress_lite accesspress_mag accesspress_parallax accesspress_ray accesspress_root accesspress_staple accesspress_store agency_lite apl…	Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are a…	-	CVE-2021-24867	2024-11-21 14:53	2022-02-21	Show	GitHub Exploit DB Packet Storm

195587	4.8	MEDIUM Network	lenderd	mortgage_calculators_wp	The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform …	-	CVE-2021-24904	2024-11-21 14:53	2022-02-14	Show	GitHub Exploit DB Packet Storm

195588	6.1	MEDIUM Network	brevo	newsletter\ _smtp\ _email_marketing_and_subscribe	The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in attributes, leading to…	-	CVE-2021-24874	2024-11-21 14:53	2022-02-14	Show	GitHub Exploit DB Packet Storm

195589	5.4	MEDIUM Network	wpchill	remove_footer_credit	The Remove Footer Credit WordPress plugin before 1.0.6 does not have CSRF check in place when saving its settings, which could allow attacker to make logged in admins change them and lead to Stored X…	-	CVE-2021-24446	2024-11-21 14:53	2022-02-14	Show	GitHub Exploit DB Packet Storm

195590	5.4	MEDIUM Network	supportcandy	supportcandy	The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Script…	CWE-79 Cross-site Scripting	CVE-2021-24880	2024-11-21 14:53	2022-02-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed