Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258811 7.1 危険 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の Infiniband 解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2563 2010-05-20 18:30 2009-07-20 Show GitHub Exploit DB Packet Storm
258812 5 警告 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の AFS 解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2562 2010-05-20 18:29 2009-07-20 Show GitHub Exploit DB Packet Storm
258813 5 警告 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2560 2010-05-20 18:29 2009-07-20 Show GitHub Exploit DB Packet Storm
258814 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
RealVNC
レッドハット		 - RealVNC VNC Viewer コンポーネントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4770 2010-05-20 18:03 2009-01-16 Show GitHub Exploit DB Packet Storm
258815 4.9 警告 ヒューレット・パッカード - HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1032 2010-05-19 17:57 2010-04-16 Show GitHub Exploit DB Packet Storm
258816 9.3 危険 アドビシステムズ - 複数の Adobe 製品などで利用される Adobe Download Manager におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1278 2010-05-19 17:57 2010-04-15 Show GitHub Exploit DB Packet Storm
258817 5 警告 The Perl Foundation - Perl における UTF-8 文字列の処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3626 2010-05-19 17:57 2009-10-29 Show GitHub Exploit DB Packet Storm
258818 9.3 危険 サン・マイクロシステムズ - Java NPAPI plugin および Java Deployment Toolkit における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2010-1423 2010-05-19 17:56 2010-04-15 Show GitHub Exploit DB Packet Storm
258819 4.3 警告 ISC, Inc.
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット		 - BIND 9 の DNSSEC 検証コードに脆弱性 CWE-Other
その他 		CVE-2010-0097 2010-05-19 17:42 2010-01-20 Show GitHub Exploit DB Packet Storm
258820 9.3 危険 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の erf ファイル処理に脆弱性 CWE-189
数値処理の問題 		CVE-2009-3829 2010-05-19 17:42 2009-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197601 4.3 MEDIUM
Network 		wp_seo_redirect_301_project wp_seo_redirect_301 The WP SEO Redirect 301 WordPress plugin before 2.3.2 does not have CSRF in place when deleting redirects, which could allow attackers to make a logged in admin delete them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2021-24832 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197602 8.8 HIGH
Network 		wp-buy visitor_traffic_real_time_statistics The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) befor… CWE-89
SQL Injection 		CVE-2021-24829 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197603 9.8 CRITICAL
Network 		asgaros asgaros_forum The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection i… CWE-89
SQL Injection 		CVE-2021-24827 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197604 4.3 MEDIUM
Network 		phoenix_media_rename_project phoenix_media_rename The Phoenix Media Rename WordPress plugin before 3.4.4 does not have capability checks in its phoenix_media_rename AJAX action, which could allow users with Author roles to rename any uploaded media … NVD-CWE-noinfo
CVE-2021-24816 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197605 5.4 MEDIUM
Network 		schiocco support_board The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting attacks by placing a payload in the notes field, when an administrator or any authe… CWE-79
Cross-site Scripting 		CVE-2021-24807 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197606 4.3 MEDIUM
Network 		gvectors wpdiscuz The wpDiscuz WordPress plugin before 7.3.4 does check for CSRF when adding, editing and deleting comments, which could allow attacker to make logged in users such as admin edit and delete arbitrary c… CWE-352
 Origin Validation Error 		CVE-2021-24806 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197607 4.3 MEDIUM
Network 		wp_survey_plus_project wp_survey_plus The WP Survey Plus WordPress plugin through 1.0 does not have any authorisation and CSRF checks in place in its AJAX actions, allowing any user to call them and add/edit/delete Surveys. Furthermore, … CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24801 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197608 6.1 MEDIUM
Network 		androidbubbles wp_header_images The WP Header Images WordPress plugin before 2.0.1 does not sanitise and escape the t parameter before outputting it back in the plugin's settings page, leading to a Reflected Cross-Site Scripting is… CWE-79
Cross-site Scripting 		CVE-2021-24798 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197609 7.2 HIGH
Network 		draftpress header_footer_code_manager The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets … CWE-89
SQL Injection 		CVE-2021-24791 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197610 6.5 MEDIUM
Network 		batch_cat_project batch_cat The Batch Cat WordPress plugin through 0.3 defines 3 custom AJAX actions, which both require authentication but are available for all roles. As a result, any authenticated user (including simple subs… NVD-CWE-Other
CVE-2021-24788 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm