Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258171	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0431	2010-09-7 15:50	2010-08-19	Show	GitHub Exploit DB Packet Storm

258172	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0429	2010-09-7 15:49	2010-08-19	Show	GitHub Exploit DB Packet Storm

258173	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0428	2010-09-7 15:48	2010-08-19	Show	GitHub Exploit DB Packet Storm

258174	-	-	ワイズテクノロジー	-	Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性	-	-	2010-09-7 15:47	2010-08-17	Show	GitHub Exploit DB Packet Storm

258175	7.8	危険	日立	-	Hitachi Storage Command Suite 製品の組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-09-7 15:45	2010-08-16	Show	GitHub Exploit DB Packet Storm

258176	7.8	危険	日立	-	JP1/Desktop Navigation 組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-09-7 15:44	2010-08-16	Show	GitHub Exploit DB Packet Storm

258177	4.3	警告	Zabbix	-	Zabbix の formatQuery 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2790	2010-09-7 15:42	2010-06-9	Show	GitHub Exploit DB Packet Storm

258178	7.1	危険	レッドハット X.Org Foundation サイバートラスト株式会社オラクル	-	X.Org の X server の fbComposite 関数における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-1166	2010-09-6 18:42	2010-04-28	Show	GitHub Exploit DB Packet Storm

258179	10	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の UDVM 解析部における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-2995	2010-09-6 17:48	2010-06-9	Show	GitHub Exploit DB Packet Storm

258180	8.3	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の UDVM 解析部におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2287	2010-09-6 17:48	2010-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197911	4.3	MEDIUM Adjacent	mcafee	content_security_reporter	Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted passwor…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2021-23884	2024-11-21 14:52	2021-04-15	Show	GitHub Exploit DB Packet Storm

197912	9.8	CRITICAL Network	facebook	thrift	An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior…	CWE-763 Release of Invalid Pointer or Reference	CVE-2021-24028	2024-11-21 14:52	2021-04-14	Show	GitHub Exploit DB Packet Storm

197913	6.5	MEDIUM Network	fortinet	fortiadc fortiadc_manager	A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2021-24024	2024-11-21 14:52	2021-04-13	Show	GitHub Exploit DB Packet Storm

197914	6.5	MEDIUM Network	patreon	patreon_wordpress	The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Pa…	-	CVE-2021-24231	2024-11-21 14:52	2021-04-12	Show	GitHub Exploit DB Packet Storm

197915	8.1	HIGH Network	patreon	patreon_wordpress	The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged in user overwrite or create arbitrary use…	CWE-352 Origin Validation Error	CVE-2021-24230	2024-11-21 14:52	2021-04-12	Show	GitHub Exploit DB Packet Storm

197916	9.6	CRITICAL Network	patreon	patreon_wordpress	The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress plugin before 1.7.2. This AJAX hook is used to upd…	-	CVE-2021-24229	2024-11-21 14:52	2021-04-12	Show	GitHub Exploit DB Packet Storm

197917	9.6	CRITICAL Network	patreon	patreon_wordpress	The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login form (wp-login.php) is hooked by the plugin and o…	-	CVE-2021-24228	2024-11-21 14:52	2021-04-12	Show	GitHub Exploit DB Packet Storm

197918	7.5	HIGH Network	patreon	patreon_wordpress	The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an atta…	CWE-200 Information Exposure	CVE-2021-24227	2024-11-21 14:52	2021-04-12	Show	GitHub Exploit DB Packet Storm

197919	7.5	HIGH Network	accessally	accessally	In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/product/product-shortcode.php" responsible for the [accessally_order_form] shortcode is dumping serialize($_SERVER), which…	-	CVE-2021-24226	2024-11-21 14:52	2021-04-12	Show	GitHub Exploit DB Packet Storm

197920	5.4	MEDIUM Network	elbtide	advanced_booking_calendar	The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in an A tag, leading to a reflected XSS issue	-	CVE-2021-24225	2024-11-21 14:52	2021-04-12	Show	GitHub Exploit DB Packet Storm