Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 10:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258351	5	警告	アップル ClamAV	-	ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1311	2010-09-8 15:52	2010-04-8	Show	GitHub Exploit DB Packet Storm

258352	5	警告	アップル	-	Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1800	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

258353	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1808	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

258354	6.2	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo の secure path 機能における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1646	2010-09-8 15:50	2010-06-7	Show	GitHub Exploit DB Packet Storm

258355	6.9	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1163	2010-09-8 15:50	2010-04-16	Show	GitHub Exploit DB Packet Storm

258356	10	危険	ESET アップル ClamAV ソースネクスト	-	複数のアンチウィルス製品に脆弱性	CWE-noinfo 情報不足	CVE-2010-0098	2010-09-8 15:50	2010-04-13	Show	GitHub Exploit DB Packet Storm

258357	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

258358	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

258359	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2784	2010-09-7 15:51	2010-08-19	Show	GitHub Exploit DB Packet Storm

258360	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0431	2010-09-7 15:50	2010-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196991	8.8	HIGH Network	techspawn	wp-email-users	The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJAX action, available to any authenticated users, allowing them to perform SQL in…	-	CVE-2021-24959	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196992	5.4	MEDIUM Network	mekshq	meks_easy_photo_feed_widget	The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action, available to any authenticated user, and…	-	CVE-2021-24958	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196993	5.4	MEDIUM Network	thememove	insight_core	The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_options_import (available to any authenticated user), does not validate user in…	-	CVE-2021-24950	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196994	6.1	MEDIUM Network	woocommerce	persian-woocommerce	The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which could lead to a Reflected Cross-Site Scr…	-	CVE-2021-24940	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196995	6.5	MEDIUM Network	fatcatapps	easy_pricing_tables	The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog…	CWE-352 Origin Validation Error	CVE-2021-25098	2024-11-21 14:54	2022-03-7	Show	GitHub Exploit DB Packet Storm

196996	7.5	HIGH Network	wpdownloadmanager	wordpress_download_manager	The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sens…	-	CVE-2021-25087	2024-11-21 14:54	2022-03-7	Show	GitHub Exploit DB Packet Storm

196997	6.1	MEDIUM Network	obtaininfotech	multisite_content_copier\/updater	The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting…	CWE-79 Cross-site Scripting	CVE-2021-25039	2024-11-21 14:54	2022-03-7	Show	GitHub Exploit DB Packet Storm

196998	6.1	MEDIUM Network	obtaininfotech	multisite_user_sync\/unsync	The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmus_source_blog and wmus_record_per_page parameters before outputting them back in attributes,…	CWE-79 Cross-site Scripting	CVE-2021-25038	2024-11-21 14:54	2022-03-7	Show	GitHub Exploit DB Packet Storm

196999	5.3	MEDIUM Network	correosexpress_project	correosexpress	The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email…	-	CVE-2021-25009	2024-11-21 14:54	2022-03-7	Show	GitHub Exploit DB Packet Storm

197000	5.4	MEDIUM Network	iptanus	wordpress_file_upload_pro wordpress_file_upload	The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 does not escape some of its shortcode argument, which could allow users with a role …	CWE-79 Cross-site Scripting	CVE-2021-24961	2024-11-21 14:54	2022-03-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed