Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
260961 7.8 危険 シスコシステムズ - Cisco IOS の SIP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0579 2010-04-8 10:41 2010-03-24 Show GitHub Exploit DB Packet Storm
260962 10 危険 シスコシステムズ - Cisco IOS の SIP 実装における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0581 2010-04-8 10:41 2010-03-24 Show GitHub Exploit DB Packet Storm
260963 10 危険 シスコシステムズ - Cisco IOS の SIP 実装における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0580 2010-04-8 10:41 2010-03-24 Show GitHub Exploit DB Packet Storm
260964 4.3 警告 マイクロソフト - Internet Explorer における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2010-0488 2010-04-7 15:02 2010-04-7 Show GitHub Exploit DB Packet Storm
260965 7.8 危険 シスコシステムズ - Cisco IOS における SCCP メッセージの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0586 2010-04-7 14:50 2010-03-24 Show GitHub Exploit DB Packet Storm
260966 7.8 危険 シスコシステムズ - Cisco IOS における SCCP メッセージの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0585 2010-04-7 14:50 2010-03-24 Show GitHub Exploit DB Packet Storm
260967 7.1 危険 シスコシステムズ - Cisco IOS における TCP セグメントの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0577 2010-04-7 14:50 2010-03-24 Show GitHub Exploit DB Packet Storm
260968 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0167 2010-04-7 14:50 2010-03-23 Show GitHub Exploit DB Packet Storm
260969 5.1 警告 Mozilla Foundation - Mac OS X 上で稼働する Mozilla Firefox の gfxTextRun::SanitizeGlyphRuns 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0166 2010-04-7 14:49 2010-03-23 Show GitHub Exploit DB Packet Storm
260970 9.3 危険 Mozilla Foundation - Mozilla Firefox の TraceRecorder::traverseScopeChain 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0165 2010-04-7 14:49 2010-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200011 6.1 MEDIUM
Network 		wp_google_fonts_project wp_google_fonts The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated us… - CVE-2021-24935 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
200012 9.8 CRITICAL
Network 		ays-pro secure_copy_content_protection_and_content_locking The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthent… - CVE-2021-24931 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
200013 5.4 MEDIUM
Network 		booking-wp-plugin bookly The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Sit… - CVE-2021-24930 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
200014 6.1 MEDIUM
Network 		email_log_project email_log The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue - CVE-2021-24924 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
200015 7.5 HIGH
Network 		wpserveur wps_hide_login The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthentic… CWE-863
 Incorrect Authorization 		CVE-2021-24917 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
200016 8.0 HIGH
Network 		tawk tawk.to_live_chat The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawkto_setwidget and tawkto_removewidget AJAX actions, available to any authenticated user. The fir… CWE-352
 Origin Validation Error 		CVE-2021-24914 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
200017 5.4 MEDIUM
Network 		my_calendar_project my_calendar The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mc_post_lookup AJAX action (available to any authenticated user) before outputting it back in… - CVE-2021-24927 2024-11-21 14:54 2021-11-29 Show GitHub Exploit DB Packet Storm
200018 5.4 MEDIUM
Network 		smashballoon smash_balloon_social_post_feed The Smash Balloon Social Post Feed WordPress plugin before 4.0.1 did not have any privilege or nonce validation before saving the plugin's setting. As a result, any logged-in user on a vulnerable sit… - CVE-2021-24918 2024-11-21 14:54 2021-11-29 Show GitHub Exploit DB Packet Storm
200019 9.8 CRITICAL
Network 		contest_gallery contest_gallery The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when… - CVE-2021-24915 2024-11-21 14:54 2021-11-29 Show GitHub Exploit DB Packet Storm
200020 4.4 MEDIUM
Local 		sophos exploit_prevention
intercept_x_endpoint
intercept_x_for_server 		A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Soph… CWE-428
 Unquoted Search Path or Element 		CVE-2021-25269 2024-11-21 14:54 2021-11-27 Show GitHub Exploit DB Packet Storm