Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
260201 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1749 2010-06-24 15:38 2010-06-10 Show GitHub Exploit DB Packet Storm
260202 7.8 危険 日立 - JP1/ServerConductor/Deployment Manager における不正にシャットダウンまたはリブートを実行する脆弱性 CWE-noinfo
情報不足 		- 2010-06-22 17:28 2010-06-4 Show GitHub Exploit DB Packet Storm
260203 6.8 警告 pon software - Explzh におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2434 2010-06-22 14:01 2010-06-22 Show GitHub Exploit DB Packet Storm
260204 4.3 警告 アップル - Apple Safari の WebKit における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-1388 2010-06-21 16:56 2010-06-10 Show GitHub Exploit DB Packet Storm
260205 9.3 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1750 2010-06-18 18:21 2010-06-10 Show GitHub Exploit DB Packet Storm
260206 9.3 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1385 2010-06-18 18:20 2010-06-10 Show GitHub Exploit DB Packet Storm
260207 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org における任意の Python コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0395 2010-06-17 18:34 2010-06-10 Show GitHub Exploit DB Packet Storm
260208 - - Accoria Networks - Accoria Rock Web Server に複数の脆弱性 - - 2010-06-17 18:33 2010-06-3 Show GitHub Exploit DB Packet Storm
260209 5 警告 富士通 - Interstage Portalworks および Interstage Interaction Manager のポータル機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-06-17 18:33 2010-05-28 Show GitHub Exploit DB Packet Storm
260210 10 危険 シスコシステムズ - Cisco Mediator Framework におけるパスワードおよびアカウントの詳細を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0600 2010-06-16 18:32 2010-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199461 4.8 MEDIUM
Network 		ninjaforms ninja_forms The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitize and escape some imported data, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilt… - CVE-2021-25066 2024-11-21 14:54 2022-07-4 Show GitHub Exploit DB Packet Storm
199462 4.8 MEDIUM
Network 		ninjaforms ninja_forms The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitise and escape field labels, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_h… CWE-79
Cross-site Scripting 		CVE-2021-25056 2024-11-21 14:54 2022-07-4 Show GitHub Exploit DB Packet Storm
199463 6.5 MEDIUM
Network 		bestwebsoft rating The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service on the post/page when a user submit such… - CVE-2021-25121 2024-11-21 14:54 2022-06-20 Show GitHub Exploit DB Packet Storm
199464 6.1 MEDIUM
Network 		oceanwp ocean_extra The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue - CVE-2021-25104 2024-11-21 14:54 2022-06-20 Show GitHub Exploit DB Packet Storm
199465 4.8 MEDIUM
Network 		google_xml_sitemaps_project google_xml_sitemaps The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting a… - CVE-2021-25088 2024-11-21 14:54 2022-06-20 Show GitHub Exploit DB Packet Storm
199466 7.8 HIGH
Local 		yandex yandex_browser Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symli… CWE-59
Link Following 		CVE-2021-25261 2024-11-21 14:54 2022-06-16 Show GitHub Exploit DB Packet Storm
199467 6.5 MEDIUM
Network 		enqueue_anything_project enqueue_anything The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. … CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2021-25116 2024-11-21 14:54 2022-06-13 Show GitHub Exploit DB Packet Storm
199468 7.2 HIGH
Network 		wpsocket automatic_grid_image_listing The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload a… - CVE-2021-25119 2024-11-21 14:54 2022-05-17 Show GitHub Exploit DB Packet Storm
199469 8.4 HIGH
Network 		sophos firewall_firmware Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA. CWE-79
Cross-site Scripting 		CVE-2021-25268 2024-11-21 14:54 2022-05-6 Show GitHub Exploit DB Packet Storm
199470 8.4 HIGH
Network 		sophos firewall_firmware Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA. CWE-79
Cross-site Scripting 		CVE-2021-25267 2024-11-21 14:54 2022-05-6 Show GitHub Exploit DB Packet Storm