Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258641	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

258642	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

258643	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1578	2010-07-6 19:18	2009-05-8	Show	GitHub Exploit DB Packet Storm

258644	8.5	危険	マイクロソフト	-	Microsoft IIS における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1256	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

258645	4	警告	マイクロソフト	-	Microsoft Windows SharePoint Services におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1264	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

258646	6.9	警告	マイクロソフト	-	Open XML File Format Converter のインストールにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1254	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

258647	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1252	2010-07-5 17:51	2010-06-8	Show	GitHub Exploit DB Packet Storm

258648	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1251	2010-07-5 17:51	2010-06-8	Show	GitHub Exploit DB Packet Storm

258649	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-1250	2010-07-5 17:51	2010-06-8	Show	GitHub Exploit DB Packet Storm

258650	4.3	警告	アップルサイバートラスト株式会社レッドハットターボリナックス CUPS	-	CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0302	2010-07-5 17:03	2010-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197971	5.4	MEDIUM Network	ultimatemember	ultimate_member	The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin before 2.1.20 did not properly sanitise, validate or encode the query string when generating a link t…	CWE-79 Cross-site Scripting	CVE-2021-24306	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197972	6.1	MEDIUM Network	targetfirst	watcheezy	The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stored XSS vulnerability. An attacker could change the licence key value through a …	-	CVE-2021-24305	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197973	5.4	MEDIUM Network	neox	hana_flv_player	The Hana Flv Player WordPress plugin through 3.1.3 is vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the 'Default Skin' field.	-	CVE-2021-24302	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197974	5.4	MEDIUM Network	bluemedicinelabs	hotjar_connecticator	The Hotjar Connecticator WordPress plugin through 1.1.1 is vulnerable to Stored Cross-Site Scripting (XSS) in the 'hotjar script' textarea. The request did include a CSRF nonce that was properly veri…	-	CVE-2021-24301	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197975	6.1	MEDIUM Network	pickplugins	product_slider_for_woocommerce	The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Sit…	-	CVE-2021-24300	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197976	6.1	MEDIUM Network	ibenic	simple_giveaways	The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS	-	CVE-2021-24298	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197977	6.1	MEDIUM Network	boostifythemes	goto	The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulner…	-	CVE-2021-24297	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197978	4.8	MEDIUM Network	gowebsolutions	wp_customer_reviews	The WP Customer Reviews WordPress plugin before 3.5.6 did not sanitise some of its settings, allowing high privilege users such as administrators to set XSS payloads in them which will then be trigge…	-	CVE-2021-24296	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197979	6.1	MEDIUM Network	mlfactory	dsgvo_all_in_one_for_wp	The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the ad…	-	CVE-2021-24294	2024-11-21 14:52	2021-05-24	Show	GitHub Exploit DB Packet Storm

197980	4.8	MEDIUM Network	clogica	seo_redirection_plugin	The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high pr…	-	CVE-2021-24327	2024-11-21 14:52	2021-05-18	Show	GitHub Exploit DB Packet Storm