Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258051 4.3 警告 マイクロソフト - Microsoft Internet Explorer の HTML コンテンツ作成の実装における削除済みの重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3327 2010-10-25 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
258052 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3326 2010-10-25 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
258053 4.3 警告 マイクロソフト - Microsoft Internet Explorer における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3325 2010-10-25 16:31 2010-10-12 Show GitHub Exploit DB Packet Storm
258054 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1263 2010-10-25 16:29 2010-06-8 Show GitHub Exploit DB Packet Storm
258055 4.3 警告 サン・マイクロシステムズ
freedesktop.org
レッドハット
サイバートラスト株式会社
Glyph & Cog, LLC		 - Xpdf および Poppler の ImageStream::ImageStream 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3609 2010-10-22 14:38 2009-10-15 Show GitHub Exploit DB Packet Storm
258056 4.3 警告 マイクロソフト - Microsoft Internet Explorer の toStaticHTML 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3243 2010-10-22 14:37 2010-10-12 Show GitHub Exploit DB Packet Storm
258057 2.6 注意 マイクロソフト - Windows 上で稼働する Microsoft Internet Explorer における重要なフォーム情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0808 2010-10-22 14:36 2010-10-12 Show GitHub Exploit DB Packet Storm
258058 5.1 警告 Yokka - 複数の Yokka 提供製品における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3165 2010-10-22 11:09 2010-10-22 Show GitHub Exploit DB Packet Storm
258059 5.1 警告 フェンリル株式会社 - Sleipnir および Grani における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3164 2010-10-22 11:08 2010-10-22 Show GitHub Exploit DB Packet Storm
258060 6.8 警告 フェンリル株式会社 - Sleipnir および Grani における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3163 2010-10-22 11:06 2010-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197861 8.8 HIGH
Network 		coderstimes out_of_stock_message_for_woocommerce The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor… - CVE-2021-24520 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197862 5.4 MEDIUM
Network 		a3rev page_view_count The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post m… - CVE-2021-24509 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197863 9.8 CRITICAL
Network 		brainstormforce astra The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (av… - CVE-2021-24507 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197864 5.4 MEDIUM
Network 		madeit forms The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (X… - CVE-2021-24505 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197865 4.8 MEDIUM
Network 		flippercode wp_google_map The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high privilege users, ev… - CVE-2021-24502 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197866 8.1 HIGH
Network 		amentotech workreap The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objec… - CVE-2021-24501 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197867 8.1 HIGH
Network 		amentotech workreap Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated. This allows an atta… CWE-352
 Origin Validation Error 		CVE-2021-24500 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197868 9.8 CRITICAL
Network 		amentotech workreap The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid use… - CVE-2021-24499 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197869 6.1 MEDIUM
Network 		marmoset marmoset_viewer The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting iss… - CVE-2021-24495 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
197870 6.5 MEDIUM
Network 		leaflet_map_project leaflet_map The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows attackers to make a logged in admin update the settings via a Cross-Site Request Fo… - CVE-2021-24467 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm