Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260081	5	警告	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2323	2010-07-16 18:40	2010-03-22	Show	GitHub Exploit DB Packet Storm

260082	10	危険	IBM	-	IBM Lotus Domino のサーバにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0358	2010-07-16 15:35	2010-01-20	Show	GitHub Exploit DB Packet Storm

260083	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1203	2010-07-15 21:46	2010-06-22	Show	GitHub Exploit DB Packet Storm

260084	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Windows 7 上で稼働する Mozilla Firefox における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1121	2010-07-15 17:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

260085	2.1	注意	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性	CWE-Other その他	CVE-2008-5913	2010-07-15 17:20	2009-01-20	Show	GitHub Exploit DB Packet Storm

260086	7.4	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 の rename_principal_2_svc() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2798	2010-07-15 17:20	2007-06-26	Show	GitHub Exploit DB Packet Storm

260087	7.9	危険	日本電気サイバートラスト株式会社 MIT Kerberos ヒューレット・パッカードターボリナックスレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性	-	CVE-2007-2443	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

260088	9.3	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性	-	CVE-2007-2442	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

260089	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2277	2010-07-14 17:27	2010-03-29	Show	GitHub Exploit DB Packet Storm

260090	6.9	警告	VMware	-	複数の VMware 製品の USB サービスにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1140	2010-07-14 17:27	2010-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211321	9.8	CRITICAL Network	expresstech	quiz_and_survey_master	An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution.…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-35949	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211322	8.8	HIGH Network	xcloner	xcloner	An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so woul…	CWE-863 Incorrect Authorization	CVE-2020-35948	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211323	7.4	HIGH Network	pagelayer	pagelayer	An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowing these actions to be executed by anyone authentic…	CWE-79 Cross-site Scripting	CVE-2020-35947	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211324	5.4	MEDIUM Network	semperplugins	all_in_one_seo_pack	An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XS…	CWE-79 Cross-site Scripting	CVE-2020-35946	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211325	8.8	HIGH Network	elegant_themes	divi_extra divi_builder divi	An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbi…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-35945	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211326	8.8	HIGH Network	pagelayer	pagelayer	An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS.	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2020-35944	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211327	8.8	HIGH Network	pickplugins	team_showcase post_grid	PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of d…	CWE-502 Deserialization of Untrusted Data	CVE-2020-35939	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211328	8.8	HIGH Network	pickplugins	team_showcase post_grid	PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data s…	CWE-502 Deserialization of Untrusted Data	CVE-2020-35938	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211329	8.0	HIGH Network	pickplugins	team_showcase post_grid	Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a r…	CWE-79 Cross-site Scripting	CVE-2020-35937	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

211330	8.0	HIGH Network	pickplugins	team_showcase post_grid	Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remote…	CWE-79 Cross-site Scripting	CVE-2020-35936	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed