Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257911	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1295	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

257912	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

257913	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

257914	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

257915	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

257916	1.9	注意	レッドハットサイバートラスト株式会社ターボリナックス Samba Project	-	Samba の mount.cifs における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2948	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

257917	6	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	Apple Mac OS の SMB サブシステムにおけるファイル共有の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2813	2010-07-20 18:01	2009-09-10	Show	GitHub Exploit DB Packet Storm

257918	5	警告	S2 Security	-	S2 Netbox に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2466	2010-07-16 18:41	2010-06-28	Show	GitHub Exploit DB Packet Storm

257919	4.3	警告	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスの WebVPN における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-7257	2010-07-16 18:41	2010-06-29	Show	GitHub Exploit DB Packet Storm

257920	7.5	危険	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における link インジェクションの脆弱性	CWE-noinfo 情報不足	CVE-2010-2324	2010-07-16 18:40	2010-06-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196891	7.8	HIGH Local	mcafee	drive_encryption	Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an un…	CWE-269 Improper Privilege Management	CVE-2021-23893	2024-11-21 14:52	2021-10-1	Show	GitHub Exploit DB Packet Storm

196892	4.3	MEDIUM Network	fortinet	fortimanager	An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.	CWE-287 Improper Authentication	CVE-2021-24017	2024-11-21 14:52	2021-10-1	Show	GitHub Exploit DB Packet Storm

196893	6.3	MEDIUM Local	fortinet	fortimanager	An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in …	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2021-24016	2024-11-21 14:52	2021-10-1	Show	GitHub Exploit DB Packet Storm

196894	7.2	HIGH Network	wp-domain-redirect_project	wp-domain-redirect	The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an `editid` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leadin…	-	CVE-2021-24401	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196895	7.2	HIGH Network	wp-display-users_project	wp-display-users	The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL …	-	CVE-2021-24400	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196896	7.2	HIGH Network	ombu	the_sorter	The check_order function of The Sorter WordPress plugin through 1.0 uses an `area_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL inject…	-	CVE-2021-24399	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196897	7.2	HIGH Network	webpsilon	responsive_3d_slider	The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, le…	-	CVE-2021-24398	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196898	7.2	HIGH Network	activemedia	microcopy	The edit functionality in the MicroCopy WordPress plugin through 1.1.0 makes a get request to fetch the related option. The id parameter used is not sanitised, escaped or validated before inserting t…	-	CVE-2021-24397	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196899	7.2	HIGH Network	bestiaweb	gseor	A pageid GET parameter of the GSEOR – WordPress SEO Plugin WordPress plugin through 1.3 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.	-	CVE-2021-24396	2024-11-21 14:52	2021-09-20	Show	GitHub Exploit DB Packet Storm

196900	9.8	CRITICAL Network	facebook	parlai	Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar ris…	CWE-502 Deserialization of Untrusted Data	CVE-2021-24040	2024-11-21 14:52	2021-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed