Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259401	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の agp サブシステムにおける情報漏えいの脆弱性	CWE-Other その他	CVE-2009-1192	2010-02-17 11:45	2009-04-24	Show	GitHub Exploit DB Packet Storm

259402	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の CIFS サブシステムにおける Unicode 文字列の処理に関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1633	2010-02-17 11:45	2009-05-28	Show	GitHub Exploit DB Packet Storm

259403	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の CIFS における長大な nativeFileSystem フィールドの処理に関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1439	2010-02-17 11:44	2009-04-27	Show	GitHub Exploit DB Packet Storm

259404	6.8	警告	サイバートラスト株式会社 Mozilla Foundation Pango.org レッドハット	-	Pango の pango_glyph_string_set_size 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1194	2010-02-17 11:44	2009-05-8	Show	GitHub Exploit DB Packet Storm

259405	9.3	危険	Artifex Software サイバートラスト株式会社 Argyll CMS サン・マイクロシステムズレッドハット	-	Ghostscript の ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0792	2010-02-17 11:44	2009-04-14	Show	GitHub Exploit DB Packet Storm

259406	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-0584	2010-02-17 11:44	2009-03-23	Show	GitHub Exploit DB Packet Storm

259407	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0583	2010-02-17 11:43	2009-03-23	Show	GitHub Exploit DB Packet Storm

259408	6	警告	Artifex Software サイバートラスト株式会社レッドハット	-	Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0411	2010-02-17 11:43	2008-02-27	Show	GitHub Exploit DB Packet Storm

259409	2.1	注意	サイバートラスト株式会社レッドハット	-	lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性	-	CVE-2005-2672	2010-02-17 11:43	2005-08-22	Show	GitHub Exploit DB Packet Storm

259410	9.3	危険	アップル	-	Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0037	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197791	9.8	CRITICAL Network	ingenesis	shopp	The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of …	-	CVE-2021-24493	2024-11-21 14:53	2021-09-14	Show	GitHub Exploit DB Packet Storm

197792	8.8	HIGH Network	fileviewer_project	fileviewer	The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator del…	CWE-352 Origin Validation Error	CVE-2021-24491	2024-11-21 14:53	2021-09-14	Show	GitHub Exploit DB Packet Storm

197793	4.3	MEDIUM Network	language_bar_flags_project	language_bar_flags	The Language Bar Flags WordPress plugin through 1.0.8 does not have any CSRF in place when saving its settings and did not sanitise or escape them when generating the flag bar in the frontend. This c…	-	CVE-2021-24431	2024-11-21 14:53	2021-09-14	Show	GitHub Exploit DB Packet Storm

197794	6.8	MEDIUM Network	email_artillery_project	email_artillery	The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plug…	-	CVE-2021-24490	2024-11-21 14:53	2021-09-14	Show	GitHub Exploit DB Packet Storm

197795	5.4	MEDIUM Network	keyword_meta_project	keyword_meta	The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing for Cross-Site Scripting issues. Furtherm…	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2021-24611	2024-11-21 14:53	2021-09-6	Show	GitHub Exploit DB Packet Storm

197796	5.4	MEDIUM Network	geminilabs	site_reviews	The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the …	-	CVE-2021-24603	2024-11-21 14:53	2021-09-6	Show	GitHub Exploit DB Packet Storm

197797	5.4	MEDIUM Network	wpfront	wpfront_notification_bar	The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks eve…	-	CVE-2021-24601	2024-11-21 14:53	2021-09-6	Show	GitHub Exploit DB Packet Storm

197798	6.1	MEDIUM Network	wp-webhooks	email_encoder	The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping o…	CWE-79 Cross-site Scripting	CVE-2021-24599	2024-11-21 14:53	2021-09-6	Show	GitHub Exploit DB Packet Storm

197799	5.4	MEDIUM Network	dna88	highlight	The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is …	-	CVE-2021-24591	2024-11-21 14:53	2021-09-6	Show	GitHub Exploit DB Packet Storm

197800	5.4	MEDIUM Network	gdprinfo	cookie_notice_\&_consent_banner_for_gdpr_\&_ccpa_compliance	The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customi…	CWE-79 Cross-site Scripting	CVE-2021-24590	2024-11-21 14:53	2021-09-6	Show	GitHub Exploit DB Packet Storm