Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258451 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0048 2010-07-13 16:33 2010-03-15 Show GitHub Exploit DB Packet Storm
258452 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0047 2010-07-13 16:31 2010-03-15 Show GitHub Exploit DB Packet Storm
258453 9.3 危険 アップル - Apple Safari の Cascading Style Sheet 実装 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0046 2010-07-13 16:30 2010-03-15 Show GitHub Exploit DB Packet Storm
258454 9.3 危険 アップル - Apple Safari の ImageIO における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0043 2010-07-13 16:30 2010-03-15 Show GitHub Exploit DB Packet Storm
258455 4.3 警告 アップル - Apple Safari の ImageIO における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0041 2010-07-13 16:29 2010-03-15 Show GitHub Exploit DB Packet Storm
258456 6.8 警告 アップル
サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - libc における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-0689 2010-07-13 16:28 2009-07-1 Show GitHub Exploit DB Packet Storm
258457 6.8 警告 アップル - WebKit におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2816 2010-07-13 16:28 2009-11-11 Show GitHub Exploit DB Packet Storm
258458 9.3 危険 アップル - Apple Safari の WebKit におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2195 2010-07-13 16:27 2009-08-11 Show GitHub Exploit DB Packet Storm
258459 4.3 警告 xmlsoft.org
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
OpenOffice.org Project
レッドハット		 - libxml2 および libxml の Notation または Enumeration 属性タイプの処理におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-2416 2010-07-13 16:27 2009-08-11 Show GitHub Exploit DB Packet Storm
258460 4.3 警告 xmlsoft.org
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
OpenOffice.org Project
レッドハット		 - libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-2414 2010-07-13 16:26 2009-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197931 8.8 HIGH
Network 		fortinet fortiai_firmware An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command. CWE-78
OS Command  		CVE-2021-24023 2024-11-21 14:52 2021-06-4 Show GitHub Exploit DB Packet Storm
197932 4.5 MEDIUM
Adjacent 		mcafee database_security Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted passwor… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-23896 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
197933 7.3 HIGH
Network 		fortinet fortios An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted… CWE-295
Improper Certificate Validation  		CVE-2021-24012 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
197934 8.0 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on th… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23895 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
197935 8.8 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on … CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23894 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
197936 6.1 MEDIUM
Network 		smartdatasoft car_repair_services_\&_auto_mechanic The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cros… - CVE-2021-24335 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
197937 5.4 MEDIUM
Network 		connekthq instant_images_-_one_click_unsplash_uploads The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/up… - CVE-2021-24334 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
197938 6.5 MEDIUM
Network 		content_copy_protection_\&_prevent_image_save_project content_copy_protection_\&_prevent_image_save The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24333 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
197939 4.8 MEDIUM
Network 		smooth_scroll_page_up\/down_buttons_project smooth_scroll_page_up\/down_buttons The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client si… CWE-79
Cross-site Scripting 		CVE-2021-24331 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
197940 4.8 MEDIUM
Network 		cartflows cartflows The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privil… - CVE-2021-24330 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm