Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258451	9.3	危険	アドビシステムズレッドハット	-	Linux 上で稼働する Adobe Reader および Acrobat における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2887	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

258452	6.8	警告	pon software	-	Archive Decoder における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3160	2010-10-20 14:03	2010-10-20	Show	GitHub Exploit DB Packet Storm

258453	5.1	警告	pon software	-	Explzh における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3159	2010-10-20 14:02	2010-10-20	Show	GitHub Exploit DB Packet Storm

258454	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType のデモプログラムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2527	2010-10-19 15:22	2010-07-12	Show	GitHub Exploit DB Packet Storm

258455	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType の ftmulti.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2541	2010-10-19 15:20	2010-08-6	Show	GitHub Exploit DB Packet Storm

258456	7.5	危険	The PHP Group アップルターボリナックス	-	PHP の SplObjectStorage における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2225	2010-10-19 15:20	2010-06-24	Show	GitHub Exploit DB Packet Storm

258457	2.1	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP における同じ Web サーバ上でホストされた別サイトの振る舞いを変更される脆弱性	CWE-134 書式文字列の問題	CVE-2009-0754	2010-10-19 15:17	2009-03-3	Show	GitHub Exploit DB Packet Storm

258458	5	警告	The PHP Group アップルターボリナックスレッドハット	-	PHP の JSON_parser 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-1271	2010-10-19 15:16	2009-04-8	Show	GitHub Exploit DB Packet Storm

258459	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2008-1808	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

258460	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるメモリ破壊の脆弱性	CWE-189 数値処理の問題	CVE-2008-1807	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197891	5.4	MEDIUM Network	nicdark	cost_calculator	The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator > Price S…	CWE-79 Cross-site Scripting	CVE-2021-24821	2024-11-21 14:53	2022-03-7	Show	GitHub Exploit DB Packet Storm

197892	4.8	MEDIUM Network	wp-eventmanager	wp_event_manager	The WP Event Manager WordPress plugin before 3.1.23 does not escape some of its Field Editor settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even …	CWE-79 Cross-site Scripting	CVE-2021-24810	2024-11-21 14:53	2022-03-7	Show	GitHub Exploit DB Packet Storm

197893	7.2	HIGH Network	wpaffiliatefeed	tradetracker-store	The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.	CWE-89 SQL Injection	CVE-2021-24778	2024-11-21 14:53	2022-03-7	Show	GitHub Exploit DB Packet Storm

197894	7.2	HIGH Network	hotscot	contact_form	The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a…	CWE-89 SQL Injection	CVE-2021-24777	2024-11-21 14:53	2022-03-7	Show	GitHub Exploit DB Packet Storm

197895	4.8	MEDIUM Network	codeasily	grand_flagallery	The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when…	-	CVE-2021-24903	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

197896	4.8	MEDIUM Network	securemoz	security_audit	The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilt…	-	CVE-2021-24901	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

197897	4.8	MEDIUM Network	editable-table_project	editable_table	The EditableTable WordPress plugin through 0.1.4 does not sanitise and escape any of the Table and Column fields, which could allow high privilege users to perform Cross-Site Scripting attacks even w…	-	CVE-2021-24898	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

197898	8.8	HIGH Network	wpscan	wp_cloudy	The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue	-	CVE-2021-24864	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

197899	8.1	HIGH Network	schiocco	support_board	The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow attackers to make logged in users do unwanted actions.…	-	CVE-2021-24823	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

197900	6.5	MEDIUM Network	bold-themes	cost_calculator	The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on W…	-	CVE-2021-24820	2024-11-21 14:53	2022-02-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed