Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259361	10	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0361	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

259362	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープ領域のメモリ格納場所を上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-0360	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

259363	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0273	2010-02-23 11:58	2010-01-8	Show	GitHub Exploit DB Packet Storm

259364	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0272	2010-02-23 11:57	2010-01-8	Show	GitHub Exploit DB Packet Storm

259365	7.5	危険	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の Java Web Start 実装における署名された JAR ファイルと JNLP アプリケーション処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3886	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259366	5	警告	アップル VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の TimeZone.getTimeZone メソッドにおけるローカルファイルの存在を知られる脆弱性	CWE-Other その他	CVE-2009-3884	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259367	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Windows Pluggable Look and Feel (PL&F) における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3883	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259368	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Swing 実装における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3882	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259369	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK における権限を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3881	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259370	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Abstract Window Toolkit (AWT) における情報漏えいの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3880	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197811	8.8	HIGH Network	wow-estore	side_menu	The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue	CWE-89 SQL Injection	CVE-2021-24580	2024-11-21 14:53	2021-08-31	Show	GitHub Exploit DB Packet Storm

197812	8.8	HIGH Network	bold-themes	bold_page_builder	The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a P…	CWE-502 Deserialization of Untrusted Data	CVE-2021-24579	2024-11-21 14:53	2021-08-31	Show	GitHub Exploit DB Packet Storm

197813	5.4	MEDIUM Network	wpmanageninja	fluentsmtp	The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SM…	CWE-79 Cross-site Scripting	CVE-2021-24528	2024-11-21 14:53	2021-08-31	Show	GitHub Exploit DB Packet Storm

197814	6.1	MEDIUM Network	sharethis	dashboard_for_google_analytics	The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the p…	CWE-79 Cross-site Scripting	CVE-2021-24438	2024-11-21 14:53	2021-08-31	Show	GitHub Exploit DB Packet Storm

197815	6.1	MEDIUM Network	realfavicongenerator	favicon_by_realfavicongenerator	The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scrip…	-	CVE-2021-24437	2024-11-21 14:53	2021-08-31	Show	GitHub Exploit DB Packet Storm

197816	4.8	MEDIUM Network	erident_custom_login_and_dashboard_project	erident_custom_login_and_dashboard	The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is…	CWE-79 Cross-site Scripting	CVE-2021-24658	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

197817	8.8	HIGH Network	hmplugin	hm_multiple_roles	The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2021-24602	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

197818	4.8	MEDIUM Network	simple_banner_project	simple_banner	The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfilt…	CWE-79 Cross-site Scripting	CVE-2021-24574	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

197819	5.4	MEDIUM Network	harmonicdesign	hd_quiz	The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues	CWE-79 Cross-site Scripting	CVE-2021-24571	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

197820	8.8	HIGH Network	contact_form_7_captcha_project	contact_form_7_captcha	The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them…	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2021-24565	2024-11-21 14:53	2021-08-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed