Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258161 6.8 警告 アップル - Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1801 2010-09-8 15:52 2010-08-25 Show GitHub Exploit DB Packet Storm
258162 5 警告 アップル
ClamAV		 - ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1311 2010-09-8 15:52 2010-04-8 Show GitHub Exploit DB Packet Storm
258163 5 警告 アップル - Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1800 2010-09-8 15:51 2010-08-25 Show GitHub Exploit DB Packet Storm
258164 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1808 2010-09-8 15:51 2010-08-25 Show GitHub Exploit DB Packet Storm
258165 6.2 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo の secure path 機能における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1646 2010-09-8 15:50 2010-06-7 Show GitHub Exploit DB Packet Storm
258166 6.9 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1163 2010-09-8 15:50 2010-04-16 Show GitHub Exploit DB Packet Storm
258167 10 危険 ESET
アップル
ClamAV
ソースネクスト		 - 複数のアンチウィルス製品に脆弱性 CWE-noinfo
情報不足 		CVE-2010-0098 2010-09-8 15:50 2010-04-13 Show GitHub Exploit DB Packet Storm
258168 7.5 危険 The PHP Group
アップル		 - PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1129 2010-09-8 15:49 2010-03-26 Show GitHub Exploit DB Packet Storm
258169 4.4 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0427 2010-09-8 15:49 2010-02-25 Show GitHub Exploit DB Packet Storm
258170 6.6 警告 サイバートラスト株式会社
レッドハット		 - QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2784 2010-09-7 15:51 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197011 4.8 MEDIUM
Network 		inspirational_quote_rotator_project inspirational_quote_rotator The Inspirational Quote Rotator WordPress plugin through 1.0.0 does not sanitize and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issue… - CVE-2021-24771 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197012 6.1 MEDIUM
Network 		wp_system_log_project wp_system_log The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow u… - CVE-2021-24756 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197013 7.2 HIGH
Network 		cleverplugins seo_booster The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_ajax" AJAX request as the $_REQUEST['order'][0]['dir'] parameter is not properly… - CVE-2021-24747 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197014 4.8 MEDIUM
Network 		basixonline nex-forms The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before outputting them in attribute… - CVE-2021-24705 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197015 9.8 CRITICAL
Network 		wpdataaccess wp_data_access The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backup_date parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbi… - CVE-2021-24866 2024-11-21 14:53 2021-12-7 Show GitHub Exploit DB Packet Storm
197016 5.4 MEDIUM
Network 		pdf.js_viewer_project pdf.js_viewer The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Sit… - CVE-2021-24759 2024-11-21 14:53 2021-12-7 Show GitHub Exploit DB Packet Storm
197017 4.8 MEDIUM
Network 		reputeinfosystems contact_form\
_survey_\&_popup_form_plugin_for_wordpress_-_arforms_form_builder 		The Contact Form, Survey & Popup Form Plugin for WordPress plugin before 1.5 does not properly sanitize some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even… - CVE-2021-24718 2024-11-21 14:53 2021-12-7 Show GitHub Exploit DB Packet Storm
197018 4.8 MEDIUM
Network 		soflyy wp_all_import The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fields before outputting them in admin pages, which could allow high privilege… - CVE-2021-24714 2024-11-21 14:53 2021-12-7 Show GitHub Exploit DB Packet Storm
197019 6.1 MEDIUM
Network 		wpchill check_\&_log_email The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting CWE-79
Cross-site Scripting 		CVE-2021-24908 2024-11-21 14:53 2021-11-29 Show GitHub Exploit DB Packet Storm
197020 4.8 MEDIUM
Network 		media-tags_project media-tags The Media-Tags WordPress plugin through 3.2.0.2 does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the u… - CVE-2021-24899 2024-11-21 14:53 2021-11-29 Show GitHub Exploit DB Packet Storm