Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258011 6.8 警告 w3m project
ターボリナックス
サイバートラスト株式会社
レッドハット		 - w3m のistream.c における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2074 2010-09-27 16:24 2010-06-16 Show GitHub Exploit DB Packet Storm
258012 6.8 警告 レッドハット
サイバートラスト株式会社
ターボリナックス
OpenLDAP Foundation		 - OpenLDAP における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3767 2010-09-27 16:23 2009-10-23 Show GitHub Exploit DB Packet Storm
258013 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3021 2010-09-27 16:21 2010-08-12 Show GitHub Exploit DB Packet Storm
258014 5 警告 Opera Software ASA - Opera の news-feed プレビュー機能における任意のフィードの購読を強制される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3020 2010-09-27 16:21 2010-08-12 Show GitHub Exploit DB Packet Storm
258015 9.3 危険 Opera Software ASA - Opera におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3019 2010-09-27 16:21 2010-08-12 Show GitHub Exploit DB Packet Storm
258016 9.3 危険 Opera Software ASA - Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2666 2010-09-27 16:20 2010-06-21 Show GitHub Exploit DB Packet Storm
258017 4.3 警告 Opera Software ASA - Opera における URI の処理に関するクロスサイトスクリプティングの脆弱性\ CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2665 2010-09-27 16:20 2010-06-21 Show GitHub Exploit DB Packet Storm
258018 4.3 警告 Opera Software ASA - Opera の HTML コンテンツにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2664 2010-09-27 16:20 2010-07-1 Show GitHub Exploit DB Packet Storm
258019 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2663 2010-09-27 16:20 2010-07-1 Show GitHub Exploit DB Packet Storm
258020 4.3 警告 Opera Software ASA - Opera におけるポップアップブロッカーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2662 2010-09-27 16:20 2010-07-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197691 9.8 CRITICAL
Network 		facebook parlai Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar ris… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-24040 2024-11-21 14:52 2021-09-11 Show GitHub Exploit DB Packet Storm
197692 8.8 HIGH
Network 		fortinet fortimanager An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user profile to access the SD-WAN Orchestrator panel via directl… NVD-CWE-Other
CVE-2021-24006 2024-11-21 14:52 2021-09-7 Show GitHub Exploit DB Packet Storm
197693 7.2 HIGH
Network 		geekwebsolution embed_youtube_video The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. CWE-89
SQL Injection 		CVE-2021-24395 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
197694 7.2 HIGH
Network 		easy_testimonial_manager_project easy_testimonial_manager An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection CWE-89
SQL Injection 		CVE-2021-24394 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
197695 7.2 HIGH
Network 		comment_highlighter_project comment_highlighter A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. CWE-89
SQL Injection 		CVE-2021-24393 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
197696 7.2 HIGH
Network 		swiftcrm club-management-software An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injectio… CWE-89
SQL Injection 		CVE-2021-24392 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
197697 8.8 HIGH
Network 		cashtomer_project cashtomer An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. CWE-89
SQL Injection 		CVE-2021-24391 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
197698 7.2 HIGH
Network 		alipay_project alipay A proid GET parameter of the WordPress???Alipay|???Tenpay|??PayPal???? WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited… - CVE-2021-24390 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
197699 8.8 HIGH
Network 		jiangqie official_website_mini_program The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues CWE-89
SQL Injection 		CVE-2021-24303 2024-11-21 14:52 2021-09-6 Show GitHub Exploit DB Packet Storm
197700 7.8 HIGH
Local 		oculus desktop Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue a… CWE-269
 Improper Privilege Management 		CVE-2021-24038 2024-11-21 14:52 2021-08-20 Show GitHub Exploit DB Packet Storm