Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258081 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングを誘導される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1082 2010-09-27 15:57 2008-02-29 Show GitHub Exploit DB Packet Storm
258082 6.8 警告 Opera Software ASA - Opera における任意のスクリプトを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1081 2010-09-27 15:57 2008-02-29 Show GitHub Exploit DB Packet Storm
258083 6.8 警告 Opera Software ASA - Opera における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1080 2010-09-27 15:55 2008-02-29 Show GitHub Exploit DB Packet Storm
258084 9.3 危険 リアルネットワークス - RealNetworks RealPlayer におけるファイルのアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3002 2010-09-21 14:11 2010-08-26 Show GitHub Exploit DB Packet Storm
258085 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer の ParseKnownType 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3000 2010-09-21 14:11 2010-08-26 Show GitHub Exploit DB Packet Storm
258086 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer の Internet Explorer プラグインにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3001 2010-09-21 14:11 2010-08-26 Show GitHub Exploit DB Packet Storm
258087 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2996 2010-09-21 14:10 2010-08-26 Show GitHub Exploit DB Packet Storm
258088 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0120 2010-09-17 15:56 2010-08-26 Show GitHub Exploit DB Packet Storm
258089 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-0117 2010-09-17 15:56 2010-08-26 Show GitHub Exploit DB Packet Storm
258090 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0116 2010-09-17 15:56 2010-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197031 9.8 CRITICAL
Network 		roundupwp registrations_for_the_events_calendar The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action (available to both unauthenticated and a… - CVE-2021-24943 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197032 6.1 MEDIUM
Network 		profilepress loginwp The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in … - CVE-2021-24939 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197033 6.1 MEDIUM
Network 		woocommerce woocommerce_currency_switcher The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocs_update_profiles_data AJAX action (available to any authenticated user) before outputting it back … - CVE-2021-24938 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197034 6.1 MEDIUM
Network 		wp_google_fonts_project wp_google_fonts The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated us… - CVE-2021-24935 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197035 9.8 CRITICAL
Network 		ays-pro secure_copy_content_protection_and_content_locking The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthent… - CVE-2021-24931 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197036 5.4 MEDIUM
Network 		booking-wp-plugin bookly The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Sit… - CVE-2021-24930 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197037 6.1 MEDIUM
Network 		email_log_project email_log The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue - CVE-2021-24924 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197038 7.5 HIGH
Network 		wpserveur wps_hide_login The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthentic… CWE-863
 Incorrect Authorization 		CVE-2021-24917 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197039 8.0 HIGH
Network 		tawk tawk.to_live_chat The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawkto_setwidget and tawkto_removewidget AJAX actions, available to any authenticated user. The fir… CWE-352
 Origin Validation Error 		CVE-2021-24914 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197040 5.4 MEDIUM
Network 		my_calendar_project my_calendar The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mc_post_lookup AJAX action (available to any authenticated user) before outputting it back in… - CVE-2021-24927 2024-11-21 14:54 2021-11-29 Show GitHub Exploit DB Packet Storm