Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258721	6.2	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo の secure path 機能における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1646	2010-09-8 15:50	2010-06-7	Show	GitHub Exploit DB Packet Storm

258722	6.9	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1163	2010-09-8 15:50	2010-04-16	Show	GitHub Exploit DB Packet Storm

258723	10	危険	ESET アップル ClamAV ソースネクスト	-	複数のアンチウィルス製品に脆弱性	CWE-noinfo 情報不足	CVE-2010-0098	2010-09-8 15:50	2010-04-13	Show	GitHub Exploit DB Packet Storm

258724	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

258725	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

258726	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2784	2010-09-7 15:51	2010-08-19	Show	GitHub Exploit DB Packet Storm

258727	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0431	2010-09-7 15:50	2010-08-19	Show	GitHub Exploit DB Packet Storm

258728	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0429	2010-09-7 15:49	2010-08-19	Show	GitHub Exploit DB Packet Storm

258729	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0428	2010-09-7 15:48	2010-08-19	Show	GitHub Exploit DB Packet Storm

258730	-	-	ワイズテクノロジー	-	Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性	-	-	2010-09-7 15:47	2010-08-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198471	9.1	CRITICAL Network	whatsapp	whatsapp	A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite Wh…	CWE-22 Path Traversal	CVE-2021-24035	2024-11-21 14:52	2021-06-11	Show	GitHub Exploit DB Packet Storm

198472	4.8	MEDIUM Network	easy_preloader_project	easy_preloader	The Easy Preloader WordPress plugin through 1.0.0 does not sanitise its setting fields, leading to authenticated (admin+) Stored Cross-Site scripting issues	-	CVE-2021-24344	2024-11-21 14:52	2021-06-7	Show	GitHub Exploit DB Packet Storm

198473	4.8	MEDIUM Network	iflychat	iflychat	The iFlyChat WordPress plugin before 4.7.0 does not sanitise its APP ID setting before outputting it back in the page, leading to an authenticated Stored Cross-Site Scripting issue	CWE-79 Cross-site Scripting	CVE-2021-24343	2024-11-21 14:52	2021-06-7	Show	GitHub Exploit DB Packet Storm

198474	6.1	MEDIUM Network	jnews	jnews	The JNews WordPress theme before 8.0.6 did not sanitise the cat_id parameter in the POST request /?ajax-request=jnews (with action=jnews_build_mega_category_*), leading to a Reflected Cross-Site Scri…	-	CVE-2021-24342	2024-11-21 14:52	2021-06-7	Show	GitHub Exploit DB Packet Storm

198475	7.5	HIGH Network	veronalabs	wp_statistics	The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which…	-	CVE-2021-24340	2024-11-21 14:52	2021-06-7	Show	GitHub Exploit DB Packet Storm

198476	8.8	HIGH Network	video-embed-box_project	video-embed-box	The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page (available via forced browsing) is not sanitised, validated or escaped before being used in a SQL statement, allowin…	-	CVE-2021-24337	2024-11-21 14:52	2021-06-7	Show	GitHub Exploit DB Packet Storm

198477	7.2	HIGH Network	zavedil	flightlog	The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and admin…	-	CVE-2021-24336	2024-11-21 14:52	2021-06-7	Show	GitHub Exploit DB Packet Storm

198478	8.8	HIGH Network	fortinet	fortiai_firmware	An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command.	CWE-78 OS Command	CVE-2021-24023	2024-11-21 14:52	2021-06-4	Show	GitHub Exploit DB Packet Storm

198479	4.5	MEDIUM Adjacent	mcafee	database_security	Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted passwor…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2021-23896	2024-11-21 14:52	2021-06-2	Show	GitHub Exploit DB Packet Storm

198480	7.3	HIGH Network	fortinet	fortios	An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted…	CWE-295 Improper Certificate Validation	CVE-2021-24012	2024-11-21 14:52	2021-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed