Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258451	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0048	2010-07-13 16:33	2010-03-15	Show	GitHub Exploit DB Packet Storm

258452	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0047	2010-07-13 16:31	2010-03-15	Show	GitHub Exploit DB Packet Storm

258453	9.3	危険	アップル	-	Apple Safari の Cascading Style Sheet 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0046	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

258454	9.3	危険	アップル	-	Apple Safari の ImageIO における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0043	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

258455	4.3	警告	アップル	-	Apple Safari の ImageIO における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0041	2010-07-13 16:29	2010-03-15	Show	GitHub Exploit DB Packet Storm

258456	6.8	警告	アップルサイバートラスト株式会社 Mozilla Foundation レッドハット	-	libc における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0689	2010-07-13 16:28	2009-07-1	Show	GitHub Exploit DB Packet Storm

258457	6.8	警告	アップル	-	WebKit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2816	2010-07-13 16:28	2009-11-11	Show	GitHub Exploit DB Packet Storm

258458	9.3	危険	アップル	-	Apple Safari の WebKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2195	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

258459	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml の Notation または Enumeration 属性タイプの処理におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2416	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

258460	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-2414	2010-07-13 16:26	2009-08-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196881	9.8	CRITICAL Network	molie_instructure_canvas_linking_tool_project	molie_instructure_canvas_linking_tool	The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection	-	CVE-2021-25007	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196882	6.1	MEDIUM Network	molie_instructure_canvas_linking_tool_project	molie_instructure_canvas_linking_tool	The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue	-	CVE-2021-25006	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196883	9.8	CRITICAL Network	wptaskforce	wpcargo_track_\&_trace	The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-25003	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196884	6.1	MEDIUM Network	wki	idpay_for_contact_form_7	The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpay_error parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting	-	CVE-2021-24996	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196885	4.8	MEDIUM Network	html5_responsive_faq_project	html5_responsive_faq	The HTML5 Responsive FAQ WordPress plugin through 2.8.5 does not properly sanitise and escape some of its settings, which could allow a high privilege users to perform Cross-Site Scripting attacks ev…	-	CVE-2021-24995	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196886	6.4	MEDIUM Network	childtheme-generator	child_theme_generator	The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard	-	CVE-2021-24982	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196887	4.9	MEDIUM Network	bestwebsoft	error_log_viewer	The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outs…	-	CVE-2021-24966	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196888	8.8	HIGH Network	techspawn	wp-email-users	The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJAX action, available to any authenticated users, allowing them to perform SQL in…	-	CVE-2021-24959	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196889	5.4	MEDIUM Network	mekshq	meks_easy_photo_feed_widget	The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action, available to any authenticated user, and…	-	CVE-2021-24958	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

196890	5.4	MEDIUM Network	thememove	insight_core	The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_options_import (available to any authenticated user), does not validate user in…	-	CVE-2021-24950	2024-11-21 14:54	2022-03-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed