Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257721 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195271 8.8 HIGH
Network 		fortinet fortiai_firmware An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command. CWE-78
OS Command  		CVE-2021-24023 2024-11-21 14:52 2021-06-4 Show GitHub Exploit DB Packet Storm
195272 4.5 MEDIUM
Adjacent 		mcafee database_security Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted passwor… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-23896 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195273 7.3 HIGH
Network 		fortinet fortios An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted… CWE-295
Improper Certificate Validation  		CVE-2021-24012 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195274 8.0 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on th… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23895 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195275 8.8 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on … CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23894 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195276 6.1 MEDIUM
Network 		smartdatasoft car_repair_services_\&_auto_mechanic The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cros… - CVE-2021-24335 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195277 5.4 MEDIUM
Network 		connekthq instant_images_-_one_click_unsplash_uploads The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/up… - CVE-2021-24334 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195278 6.5 MEDIUM
Network 		content_copy_protection_\&_prevent_image_save_project content_copy_protection_\&_prevent_image_save The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24333 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195279 4.8 MEDIUM
Network 		smooth_scroll_page_up\/down_buttons_project smooth_scroll_page_up\/down_buttons The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client si… CWE-79
Cross-site Scripting 		CVE-2021-24331 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195280 4.8 MEDIUM
Network 		cartflows cartflows The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privil… - CVE-2021-24330 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm