Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258291 5 警告 ISC, Inc. - ISC DHCP にサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-2156 2010-08-11 18:29 2010-07-15 Show GitHub Exploit DB Packet Storm
258292 6.8 警告 サイバートラスト株式会社
MUSCLE
レッドハット		 - MUSCLE PCSC-Lite の MSGFunctionDemarshall 関数におけるバッファオーバーフロー脆弱性 CWE-119
バッファエラー 		CVE-2010-0407 2010-08-10 18:50 2010-06-18 Show GitHub Exploit DB Packet Storm
258293 2.1 注意 サイバートラスト株式会社
MUSCLE
レッドハット		 - MUSCLE PCSC-Lite の MSGFunctionDemarshall 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-4901 2010-08-10 18:50 2010-06-18 Show GitHub Exploit DB Packet Storm
258294 7.6 危険 ヒューレット・パッカード
IBM
オラクル		 - Oracle Solaris の ToolTalk における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0083 2010-08-10 18:50 2010-07-13 Show GitHub Exploit DB Packet Storm
258295 7.8 危険 サイバートラスト株式会社
Avahi
レッドハット		 - Avahi の originates_from_local_legacy_unicast_socket 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0758 2010-08-10 18:49 2009-03-3 Show GitHub Exploit DB Packet Storm
258296 6.8 警告 サン・マイクロシステムズ
68k.org		 - audiofile の msadpcm.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5824 2010-08-10 18:49 2009-01-2 Show GitHub Exploit DB Packet Storm
258297 2.4 注意 オラクル - Oracle Sun Java System Application Server および Oracle GlassFish Enterprise Server の GUI における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2397 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
258298 3 注意 オラクル - Oracle Solaris Studio における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2374 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
258299 4.3 警告 オラクル - Oracle OpenSSO Enterprise における脆弱性 CWE-noinfo
情報不足 		CVE-2009-3762 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
258300 4.3 警告 オラクル - Oracle OpenSSO Enterprise の OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3764 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197171 6.1 MEDIUM
Network 		gamepress_project gamepress The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues - CVE-2021-24617 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197172 5.4 MEDIUM
Network 		wechat_reward_project wechat_reward The Wechat Reward WordPress plugin through 1.7 does not sanitise or escape its QR settings, nor has any CSRF check in place, allowing attackers to make a logged in admin change the settings and perfo… - CVE-2021-24615 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197173 4.8 MEDIUM
Network 		sociable_project sociable The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scri… CWE-79
Cross-site Scripting 		CVE-2021-24612 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197174 6.5 MEDIUM
Network 		wp_cookie_choice_project wp_cookie_choice The Wp Cookie Choice WordPress plugin through 1.1.0 is lacking any CSRF check when saving its options, and do not escape them when outputting them in attributes. As a result, an attacker could make a… - CVE-2021-24595 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197175 4.8 MEDIUM
Network 		planso planso_forms The PlanSo Forms WordPress plugin through 2.6.3 does not escape the title of its Form before outputting it in attributes, allowing high privilege users such as admin to set XSS payload in it, even wh… - CVE-2021-24516 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197176 5.4 MEDIUM
Network 		bplugins streamcast_radio_player The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scr… - CVE-2021-24416 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197177 5.4 MEDIUM
Network 		bplugins polo_video_gallery The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contrib… - CVE-2021-24415 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197178 5.4 MEDIUM
Network 		bplugins easy_twitter_feed The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload… - CVE-2021-24413 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197179 5.4 MEDIUM
Network 		bplugins html5_audio_player The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-… - CVE-2021-24412 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
197180 5.7 MEDIUM
Network 		catchplugins catch_scroll_progress_bar
catch_sticky_menu
catch_themes_demo_import
catch_under_construction
catch_web_tools
essential_content_types
generate_child_theme
header_enhancement
t… 		Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essen… CWE-352
 Origin Validation Error 		CVE-2021-24752 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm