Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259591	9.3	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	JDK、JRE および SDK の HsbParser.getSoundBank 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3867	2010-02-24 12:23	2009-11-5	Show	GitHub Exploit DB Packet Storm

259592	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2010-0388	2010-02-23 11:59	2010-01-20	Show	GitHub Exploit DB Packet Storm

259593	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における複数のヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0387	2010-02-23 11:59	2010-01-20	Show	GitHub Exploit DB Packet Storm

259594	10	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0361	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

259595	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープ領域のメモリ格納場所を上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-0360	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

259596	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0273	2010-02-23 11:58	2010-01-8	Show	GitHub Exploit DB Packet Storm

259597	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0272	2010-02-23 11:57	2010-01-8	Show	GitHub Exploit DB Packet Storm

259598	7.5	危険	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の Java Web Start 実装における署名された JAR ファイルと JNLP アプリケーション処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3886	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259599	5	警告	アップル VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の TimeZone.getTimeZone メソッドにおけるローカルファイルの存在を知られる脆弱性	CWE-Other その他	CVE-2009-3884	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259600	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Windows Pluggable Look and Feel (PL&F) における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3883	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197881	4.3	MEDIUM Network	designwall	dw_question_\&_answer	The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as upd…	-	CVE-2021-24805	2024-11-21 14:53	2022-04-26	Show	GitHub Exploit DB Packet Storm

197882	4.3	MEDIUM Network	designwall	dw_question_\&_answer	The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2021-24800	2024-11-21 14:53	2022-04-26	Show	GitHub Exploit DB Packet Storm

197883	6.1	MEDIUM Network	heateor	sassy_social_share	The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled (which is …	-	CVE-2021-24746	2024-11-21 14:53	2022-03-29	Show	GitHub Exploit DB Packet Storm

197884	8.0	HIGH Network	vsourz	advanced_cf7_db	The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and does not validate the file to be deleted,…	CWE-352 Origin Validation Error	CVE-2021-24905	2024-11-21 14:53	2022-03-22	Show	GitHub Exploit DB Packet Storm

197885	5.4	MEDIUM Network	viitorcloud	add_subtitle	The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with classic editor) when output in the page, which could allow users with a role as lo…	-	CVE-2021-24897	2024-11-21 14:53	2022-03-15	Show	GitHub Exploit DB Packet Storm

197886	4.8	MEDIUM Network	webbigt	cybersoldier	The Cybersoldier WordPress plugin before 1.7.0 does not sanitise and escape the URL settings before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripti…	CWE-79 Cross-site Scripting	CVE-2021-24895	2024-11-21 14:53	2022-03-15	Show	GitHub Exploit DB Packet Storm

197887	6.5	MEDIUM Network	tipsandtricks-hq	simple_download_monitor	The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector.	-	CVE-2021-24692	2024-11-21 14:53	2022-03-15	Show	GitHub Exploit DB Packet Storm

197888	5.4	MEDIUM Network	custom_content_shortcode_project	custom_content_shortcode	The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v < 4.0.1) or Admin+ (v < 4.0.2) users to perform Cros…	CWE-79 Cross-site Scripting	CVE-2021-24826	2024-11-21 14:53	2022-03-7	Show	GitHub Exploit DB Packet Storm

197889	4.3	MEDIUM Network	custom_content_shortcode_project	custom_content_shortcode	The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ (v < 4.0.1) or Admin+ (v < 4.0.2) users to display a…	-	CVE-2021-24825	2024-11-21 14:53	2022-03-7	Show	GitHub Exploit DB Packet Storm

197890	4.3	MEDIUM Network	custom_content_shortcode_project	custom_content_shortcode	The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor, to access arbitrary post metadata. This c…	CWE-863 Incorrect Authorization	CVE-2021-24824	2024-11-21 14:53	2022-03-7	Show	GitHub Exploit DB Packet Storm