Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258461 4.3 警告 アップル - Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性 CWE-Other
その他 		CVE-2009-1723 2010-07-13 16:25 2009-08-5 Show GitHub Exploit DB Packet Storm
258462 3.5 注意 アップル - Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1382 2010-07-12 18:12 2010-06-15 Show GitHub Exploit DB Packet Storm
258463 3.5 注意 アップル - Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性 CWE-16
環境設定 		CVE-2010-1381 2010-07-12 18:12 2010-06-15 Show GitHub Exploit DB Packet Storm
258464 7.5 危険 アップル - Apple Mac OS X の cgtexttops CUPS フィルタにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1380 2010-07-12 18:11 2010-06-15 Show GitHub Exploit DB Packet Storm
258465 5 警告 アップル - Apple Mac OS X のプリンタ設定におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1379 2010-07-12 18:11 2010-06-15 Show GitHub Exploit DB Packet Storm
258466 5 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-noinfo
CVE-2010-0775 2010-07-12 16:43 2010-05-8 Show GitHub Exploit DB Packet Storm
258467 4.3 警告 IBM - IBM WebSphere Application Server におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0774 2010-07-12 16:43 2010-05-8 Show GitHub Exploit DB Packet Storm
258468 5 警告 アップル
サイバートラスト株式会社
レッドハット
ターボリナックス
CUPS		 - CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3553 2010-07-12 16:41 2009-11-20 Show GitHub Exploit DB Packet Storm
258469 9.3 危険 アップル - Apple Mac OS X の Open Directory における任意のコードを実行される脆弱性 CWE-310
暗号の問題 		CVE-2010-1377 2010-07-9 16:27 2010-06-15 Show GitHub Exploit DB Packet Storm
258470 6.8 警告 アップル - Apple Mac OS X のネットワーク認証における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2010-1376 2010-07-9 16:25 2010-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197731 6.1 MEDIUM
Network 		custom_login_redirect_project custom_login_redirect The Custom Login Redirect WordPress plugin through 1.0.0 does not have CSRF check in place when saving its settings, and do not sanitise or escape user input before outputting them back in the page, … - CVE-2021-24536 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197732 6.1 MEDIUM
Network 		light_messages_project light_messages The Light Messages WordPress plugin through 1.0 is lacking CSRF check when updating it's settings, and is not sanitising its Message Content in them (even with the unfiltered_html disallowed). As a r… - CVE-2021-24535 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197733 5.4 MEDIUM
Network 		phonetrack phonetrack_meu_site_manager The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "php_id" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scr… - CVE-2021-24534 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197734 9.8 CRITICAL
Network 		cozmoslabs profile_builder The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a… - CVE-2021-24527 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197735 5.4 MEDIUM
Network 		10web form_maker The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin before 1.13.60 does not escape its Form Title before outputting it in an attribute when editing a form in t… - CVE-2021-24526 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197736 4.8 MEDIUM
Network 		vikwp car_rental_management_system The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' field when adding or editing a Characteristic, allowing high privilege users such … - CVE-2021-24519 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197737 4.8 MEDIUM
Network 		wpfront notification_bar The WPFront Notification Bar WordPress plugin before 2.0.0.07176 does not sanitise or escape its Custom CSS setting, allowing high privilege users such as admin to set XSS payload in it even when the… - CVE-2021-24518 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197738 5.4 MEDIUM
Network 		videowhisper video_posts_webcam_recorder The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrative functions for handling deletion of v… - CVE-2021-24512 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197739 5.4 MEDIUM
Network 		youtube_embed_project youtube_embed The YouTube Embed WordPress plugin before 5.2.2 does not validate, escape or sanitise some of its shortcode attributes, leading to Stored XSS issues by 1. using w, h, controls, cc_lang, color, langua… - CVE-2021-24471 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
197740 6.1 MEDIUM
Network 		verse-o-matic_project verse-o-matic The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary ver… - CVE-2021-24466 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm