Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258911 3.5 注意 オラクル - Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0081 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258912 4.3 警告 オラクル - Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0835 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258913 6.4 警告 オラクル - Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2375 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258914 9.3 危険 マイクロソフト - Microsoft Office Outlook における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0266 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258915 9.3 危険 マイクロソフト - Microsoft Office Access の FieldList の ActiveX コントロール における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1881 2010-07-30 17:41 2010-07-13 Show GitHub Exploit DB Packet Storm
258916 9.3 危険 マイクロソフト - Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0814 2010-07-30 17:41 2010-07-13 Show GitHub Exploit DB Packet Storm
258917 2.1 注意 日立
CA Technologies		 - Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2157 2010-07-29 18:57 2010-06-3 Show GitHub Exploit DB Packet Storm
258918 3.5 注意 ターボリナックス
Samba Project		 - Samba の smbd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0926 2010-07-29 18:57 2010-02-24 Show GitHub Exploit DB Packet Storm
258919 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2597 2010-07-28 19:31 2010-07-2 Show GitHub Exploit DB Packet Storm
258920 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の TIFFRGBAImageGet 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2483 2010-07-28 19:31 2010-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197891 5.4 MEDIUM
Network 		nicdark cost_calculator The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator > Price S… CWE-79
Cross-site Scripting 		CVE-2021-24821 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197892 4.8 MEDIUM
Network 		wp-eventmanager wp_event_manager The WP Event Manager WordPress plugin before 3.1.23 does not escape some of its Field Editor settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even … CWE-79
Cross-site Scripting 		CVE-2021-24810 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197893 7.2 HIGH
Network 		wpaffiliatefeed tradetracker-store The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. CWE-89
SQL Injection 		CVE-2021-24778 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197894 7.2 HIGH
Network 		hotscot contact_form The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a… CWE-89
SQL Injection 		CVE-2021-24777 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197895 4.8 MEDIUM
Network 		codeasily grand_flagallery The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when… - CVE-2021-24903 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197896 4.8 MEDIUM
Network 		securemoz security_audit The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilt… - CVE-2021-24901 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197897 4.8 MEDIUM
Network 		editable-table_project editable_table The EditableTable WordPress plugin through 0.1.4 does not sanitise and escape any of the Table and Column fields, which could allow high privilege users to perform Cross-Site Scripting attacks even w… - CVE-2021-24898 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197898 8.8 HIGH
Network 		wpscan wp_cloudy The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue - CVE-2021-24864 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197899 8.1 HIGH
Network 		schiocco support_board The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow attackers to make logged in users do unwanted actions.… - CVE-2021-24823 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197900 6.5 MEDIUM
Network 		bold-themes cost_calculator The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on W… - CVE-2021-24820 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm