Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258431 5 警告 The PHP Group - PHP の chunk_split 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1862 2010-08-18 18:25 2010-05-4 Show GitHub Exploit DB Packet Storm
258432 5 警告 The PHP Group - PHP の addcslashes 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1864 2010-08-17 17:37 2010-05-3 Show GitHub Exploit DB Packet Storm
258433 5 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2190 2010-08-17 17:36 2010-05-30 Show GitHub Exploit DB Packet Storm
258434 6.4 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2010-2191 2010-08-17 17:35 2010-05-31 Show GitHub Exploit DB Packet Storm
258435 5 警告 The PHP Group - PHP の Zend Engine における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1914 2010-08-17 17:34 2010-05-8 Show GitHub Exploit DB Packet Storm
258436 6.4 警告 The PHP Group - PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1861 2010-08-17 17:33 2010-05-5 Show GitHub Exploit DB Packet Storm
258437 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0654 2010-08-16 18:57 2010-02-18 Show GitHub Exploit DB Packet Storm
258438 7.6 危険 アップル - Apple Safari における window オブジェクトの処理に脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1939 2010-08-16 15:08 2010-05-12 Show GitHub Exploit DB Packet Storm
258439 7.6 危険 IBM - IBM Lotus Domino Web Access の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0919 2010-08-16 15:05 2010-03-3 Show GitHub Exploit DB Packet Storm
258440 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品における重要な cross-origin 情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1207 2010-08-13 17:15 2010-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196881 9.8 CRITICAL
Network 		molie_instructure_canvas_linking_tool_project molie_instructure_canvas_linking_tool The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection - CVE-2021-25007 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196882 6.1 MEDIUM
Network 		molie_instructure_canvas_linking_tool_project molie_instructure_canvas_linking_tool The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue - CVE-2021-25006 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196883 9.8 CRITICAL
Network 		wptaskforce wpcargo_track_\&_trace The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-25003 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196884 6.1 MEDIUM
Network 		wki idpay_for_contact_form_7 The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpay_error parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting - CVE-2021-24996 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196885 4.8 MEDIUM
Network 		html5_responsive_faq_project html5_responsive_faq The HTML5 Responsive FAQ WordPress plugin through 2.8.5 does not properly sanitise and escape some of its settings, which could allow a high privilege users to perform Cross-Site Scripting attacks ev… - CVE-2021-24995 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196886 6.4 MEDIUM
Network 		childtheme-generator child_theme_generator The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard - CVE-2021-24982 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196887 4.9 MEDIUM
Network 		bestwebsoft error_log_viewer The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outs… - CVE-2021-24966 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196888 8.8 HIGH
Network 		techspawn wp-email-users The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJAX action, available to any authenticated users, allowing them to perform SQL in… - CVE-2021-24959 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196889 5.4 MEDIUM
Network 		mekshq meks_easy_photo_feed_widget The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action, available to any authenticated user, and… - CVE-2021-24958 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm
196890 5.4 MEDIUM
Network 		thememove insight_core The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_options_import (available to any authenticated user), does not validate user in… - CVE-2021-24950 2024-11-21 14:54 2022-03-15 Show GitHub Exploit DB Packet Storm