Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250971 4.3 警告 Apache Software Foundation
レッドハット
- Red Hat Enterprise MRG などで使用される Apache Qpid の sys/ssl/SslSocket.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-3083 2012-03-27 18:42 2010-10-7 Show GitHub Exploit DB Packet Storm
250972 4.3 警告 Django Software Foundation - Django におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3082 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
250973 4.3 警告 Horde - Horde Application Framework の util/icon_browser.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3077 2012-03-27 18:42 2010-11-9 Show GitHub Exploit DB Packet Storm
250974 7.5 危険 blentz - BIND の Simple Management のフィルタ関数における SQL インジェクション攻撃を実施される脆弱性 CWE-89
SQLインジェクション
CVE-2010-3076 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
250975 5 警告 arg0 - EncFS における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2010-3075 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
250976 2.1 注意 arg0 - EncFS の SSL_Cipher.cpp における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2010-3074 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
250977 2.1 注意 arg0 - EncFS のSSL_Cipher.cpp における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2010-3073 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
250978 9.3 危険 シスコシステムズ - Cisco WRF および ARF Player T27LB におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3044 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
250979 9.3 危険 シスコシステムズ - Cisco WRF および ARF Player T27LB におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3043 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
250980 9.3 危険 シスコシステムズ - Cisco WRF および ARF Player T27LB におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3042 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269351 9.8 CRITICAL
Network
ays-pro photo_gallery The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection. CWE-89
SQL Injection
CVE-2016-10921 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269352 6.1 MEDIUM
Network
sir gnucommerce The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10920 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269353 6.1 MEDIUM
Network
wassup_real_time_analytics_project wassup_real_time_analytics The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633. CWE-79
Cross-site Scripting
CVE-2016-10919 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269354 8.8 HIGH
Network
supsystic photo_gallery The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF. CWE-352
 Origin Validation Error
CVE-2016-10918 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269355 9.8 CRITICAL
Network
search_everything_project search_everything The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316. CWE-89
SQL Injection
CVE-2016-10917 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269356 9.8 CRITICAL
Network
codepeople appointment_booking_calendar The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319. CWE-89
SQL Injection
CVE-2016-10916 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269357 6.1 MEDIUM
Network
pojo activity_log The aryo-activity-log plugin before 2.3.3 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10891 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269358 6.1 MEDIUM
Network
matchboxdesigngroup universal_analytics The universal-analytics plugin before 1.3.1 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10912 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269359 6.1 MEDIUM
Network
cozmoslabs profile_builder The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting
CVE-2016-10911 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269360 6.1 MEDIUM
Network
formbuilder_project formbuilder The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting
CVE-2016-10910 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm