Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258151	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

258152	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

258153	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

258154	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

258155	1.9	注意	レッドハットサイバートラスト株式会社ターボリナックス Samba Project	-	Samba の mount.cifs における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2948	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

258156	6	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	Apple Mac OS の SMB サブシステムにおけるファイル共有の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2813	2010-07-20 18:01	2009-09-10	Show	GitHub Exploit DB Packet Storm

258157	5	警告	S2 Security	-	S2 Netbox に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2466	2010-07-16 18:41	2010-06-28	Show	GitHub Exploit DB Packet Storm

258158	4.3	警告	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスの WebVPN における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-7257	2010-07-16 18:41	2010-06-29	Show	GitHub Exploit DB Packet Storm

258159	7.5	危険	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における link インジェクションの脆弱性	CWE-noinfo 情報不足	CVE-2010-2324	2010-07-16 18:40	2010-06-2	Show	GitHub Exploit DB Packet Storm

258160	5	警告	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2323	2010-07-16 18:40	2010-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196921	7.2	HIGH Network	g_auto-hyperlink_project	g_auto-hyperlink	The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in a SQL statement, to select data to be displayed in the admin dashboard, leadin…	-	CVE-2021-24627	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196922	8.8	HIGH Network	chameleon_css_project	chameleon_css	The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unautho…	-	CVE-2021-24626	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196923	7.2	HIGH Network	web-dorado	spidercatalog	The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from the admin dashboard before using them in a SQL statement, leading to a SQL inj…	-	CVE-2021-24625	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196924	4.8	MEDIUM Network	addtoany	addtoany_share_buttons	The AddToAny Share Buttons WordPress plugin before 1.7.48 does not escape its Image URL button setting, which could lead allow high privilege users to perform Cross-Site Scripting attacks even when t…	-	CVE-2021-24616	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196925	4.8	MEDIUM Network	wooassist	storefront_footer_text	The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks e…	-	CVE-2021-24607	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196926	4.8	MEDIUM Network	gtranslate	google_language_translator	The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege us…	-	CVE-2021-24594	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196927	8.8	HIGH Network	igexsolutions	wpschoolpress	The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection i…	-	CVE-2021-24575	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196928	7.2	HIGH Network	shareaholic	similar_posts	The Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened environment (ie with DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS and DISALLOW_UNFIL…	NVD-CWE-Other	CVE-2021-24537	2024-11-21 14:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

196929	4.8	MEDIUM Network	e-dynamics	events_made_easy	The Events Made Easy WordPress plugin before 2.2.24 does not sanitise and escape Custom Field Names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_htm…	CWE-79 Cross-site Scripting	CVE-2021-24813	2024-11-21 14:53	2021-11-1	Show	GitHub Exploit DB Packet Storm

196930	8.8	HIGH Network	wordplus	better_messages	The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_better_messages_leave_chat, bp_better_messages_join_chat, bp_messages_leave_thread,…	CWE-352 Origin Validation Error	CVE-2021-24809	2024-11-21 14:53	2021-11-1	Show	GitHub Exploit DB Packet Storm