Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258481 9.3 危険 アドビシステムズ
Google		 - Google Chrome における Adobe Acrobat の JavaScript の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1598 2010-10-19 14:56 2009-05-11 Show GitHub Exploit DB Packet Storm
258482 6.8 警告 Google - Google Chrome で使用される Skia における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-1442 2010-10-19 14:56 2009-05-5 Show GitHub Exploit DB Packet Storm
258483 9.3 危険 Google - Google Chrome の ParamTraits::Read 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1441 2010-10-19 14:56 2009-05-5 Show GitHub Exploit DB Packet Storm
258484 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1514 2010-10-19 14:55 2009-04-20 Show GitHub Exploit DB Packet Storm
258485 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングを誘導される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1414 2010-10-19 14:55 2009-04-24 Show GitHub Exploit DB Packet Storm
258486 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングを誘導される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1413 2010-10-19 14:55 2009-04-24 Show GitHub Exploit DB Packet Storm
258487 7.8 危険 Google - Google Chrome における IsWebSafeScheme 制限を満たしていない URL をタブで開かれる脆弱性 CWE-200
情報漏えい 		CVE-2009-1412 2010-10-19 14:54 2009-04-24 Show GitHub Exploit DB Packet Storm
258488 5 警告 Google - Google Chrome の V8 JavaScript エンジンにおける同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0276 2010-10-19 14:54 2009-01-28 Show GitHub Exploit DB Packet Storm
258489 5 警告 Google - Google Chrome における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0411 2010-10-19 14:54 2009-01-28 Show GitHub Exploit DB Packet Storm
258490 2.1 注意 Google - Google Chrome の JavaScript 実装における偽装したポップアップメッセージに従って行動させられる脆弱性 CWE-Other
その他 		CVE-2008-5915 2010-10-19 14:54 2009-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197391 8.4 HIGH
Network 		sophos firewall_firmware Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA. CWE-79
Cross-site Scripting 		CVE-2021-25268 2024-11-21 14:54 2022-05-6 Show GitHub Exploit DB Packet Storm
197392 8.4 HIGH
Network 		sophos firewall_firmware Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA. CWE-79
Cross-site Scripting 		CVE-2021-25267 2024-11-21 14:54 2022-05-6 Show GitHub Exploit DB Packet Storm
197393 4.7 MEDIUM
Network 		tipsandtricks-hq all_in_one_wp_security_\&_firewall The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, o… - CVE-2021-25102 2024-11-21 14:54 2022-05-3 Show GitHub Exploit DB Packet Storm
197394 6.1 MEDIUM
Network 		advanced_page_visit_counter_project advanced_page_visit_counter The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cr… CWE-79
Cross-site Scripting 		CVE-2021-25086 2024-11-21 14:54 2022-05-3 Show GitHub Exploit DB Packet Storm
197395 7.5 HIGH
Network 		tipsacarrier_project tipsacarrier The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to re… - CVE-2021-25002 2024-11-21 14:54 2022-05-3 Show GitHub Exploit DB Packet Storm
197396 3.9 LOW
Physics 		sophos intercept_x
authenticator 		An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and… CWE-922
 Insecure Storage of Sensitive Information 		CVE-2021-25266 2024-11-21 14:54 2022-04-28 Show GitHub Exploit DB Packet Storm
197397 6.1 MEDIUM
Network 		english_wordpress_admin_project english_wordpress_admin The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue - CVE-2021-25111 2024-11-21 14:54 2022-04-26 Show GitHub Exploit DB Packet Storm
197398 8.1 HIGH
Network 		brandexponents tatsu The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory. By ad… - CVE-2021-25094 2024-11-21 14:54 2022-04-26 Show GitHub Exploit DB Packet Storm
197399 8.8 HIGH
Network 		advanced_page_visit_counter_project advanced_page_visit_counter The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenti… - CVE-2021-24957 2024-11-21 14:54 2022-04-26 Show GitHub Exploit DB Packet Storm
197400 6.1 MEDIUM
Network 		easysocialfeed easy_social_feed The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross… - CVE-2021-25120 2024-11-21 14:54 2022-04-19 Show GitHub Exploit DB Packet Storm