Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257921	5	警告	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2323	2010-07-16 18:40	2010-03-22	Show	GitHub Exploit DB Packet Storm

257922	10	危険	IBM	-	IBM Lotus Domino のサーバにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0358	2010-07-16 15:35	2010-01-20	Show	GitHub Exploit DB Packet Storm

257923	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1203	2010-07-15 21:46	2010-06-22	Show	GitHub Exploit DB Packet Storm

257924	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Windows 7 上で稼働する Mozilla Firefox における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1121	2010-07-15 17:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

257925	2.1	注意	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性	CWE-Other その他	CVE-2008-5913	2010-07-15 17:20	2009-01-20	Show	GitHub Exploit DB Packet Storm

257926	7.4	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 の rename_principal_2_svc() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2798	2010-07-15 17:20	2007-06-26	Show	GitHub Exploit DB Packet Storm

257927	7.9	危険	日本電気サイバートラスト株式会社 MIT Kerberos ヒューレット・パッカードターボリナックスレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性	-	CVE-2007-2443	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

257928	9.3	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性	-	CVE-2007-2442	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

257929	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2277	2010-07-14 17:27	2010-03-29	Show	GitHub Exploit DB Packet Storm

257930	6.9	警告	VMware	-	複数の VMware 製品の USB サービスにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1140	2010-07-14 17:27	2010-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196931	5.4	MEDIUM Network	kubiq	wp_svg_images	The WP SVG images WordPress plugin before 3.4 did not sanitise the SVG files uploaded, which could allow low privilege users such as author+ to upload a malicious SVG and then perform XSS attacks by …	-	CVE-2021-24386	2024-11-21 14:52	2021-07-6	Show	GitHub Exploit DB Packet Storm

196932	5.4	MEDIUM Network	e4j	vikrentcar_car_rental_management_system	In the VikRentCar Car Rental Management System WordPress plugin before 1.1.7, there is a custom filed option by which we can manage all the fields that the users will have to fill in before saving th…	-	CVE-2021-24388	2024-11-21 14:52	2021-07-6	Show	GitHub Exploit DB Packet Storm

196933	9.8	CRITICAL Network	beardev	joomsport	The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised user input from the shattr POST parameter…	-	CVE-2021-24384	2024-11-21 14:52	2021-07-6	Show	GitHub Exploit DB Packet Storm

196934	9.8	CRITICAL Network	stockware	motor	Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_quick_view AJAX handlers of the Motor WordPress theme before 3.1.0 allows an unaut…	-	CVE-2021-24375	2024-11-21 14:52	2021-07-6	Show	GitHub Exploit DB Packet Storm

196935	7.5	HIGH Network	fortinet	fortiauthenticator	Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuratio…	CWE-798 Use of Hard-coded Credentials	CVE-2021-24005	2024-11-21 14:52	2021-07-6	Show	GitHub Exploit DB Packet Storm

196936	8.8	HIGH Network	mozilla	thunderbird firefox firefox_esr	When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. Th…	CWE-74 Injection	CVE-2021-24002	2024-11-21 14:52	2021-06-24	Show	GitHub Exploit DB Packet Storm

196937	4.3	MEDIUM Network	mozilla	firefox	A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations. …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2021-24001	2024-11-21 14:52	2021-06-24	Show	GitHub Exploit DB Packet Storm

196938	3.1	LOW Network	mozilla	firefox	A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements…	CWE-362 Race Condition	CVE-2021-24000	2024-11-21 14:52	2021-06-24	Show	GitHub Exploit DB Packet Storm

196939	8.8	HIGH Network	mozilla	thunderbird firefox firefox_esr	If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vul…	CWE-269 CWE-697 Improper Privilege Management Incorrect Comparison	CVE-2021-23999	2024-11-21 14:52	2021-06-24	Show	GitHub Exploit DB Packet Storm

196940	6.5	MEDIUM Network	mozilla	thunderbird firefox firefox_esr	Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Fir…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2021-23998	2024-11-21 14:52	2021-06-24	Show	GitHub Exploit DB Packet Storm