Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251051 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Territory Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2418 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251052 4 警告 オラクル - Oracle Supply Chain Products Suite の Agile PLM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2417 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251053 4.3 警告 オラクル - Oracle E-Business Suite の Oracle E-Business Intelligence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2416 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251054 2.6 注意 オラクル - Oracle Sun Products Suite の Sun Convergence および Sun Java Communications Suite コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2414 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251055 4.3 警告 オラクル - Oracle Fusion Middleware の BI Publisher コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2413 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251056 4.3 警告 オラクル - Oracle E-Business Suite の Oracle iRecruitment コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2408 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251057 4 警告 オラクル - Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2406 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251058 6 警告 オラクル - Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2405 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251059 3.5 注意 オラクル - Oracle E-Business Suite の Oracle iRecruitment コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2404 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
251060 5.8 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2388 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269351 9.8 CRITICAL
Network 		ays-pro photo_gallery The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection. CWE-89
SQL Injection 		CVE-2016-10921 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269352 6.1 MEDIUM
Network 		sir gnucommerce The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10920 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269353 6.1 MEDIUM
Network 		wassup_real_time_analytics_project wassup_real_time_analytics The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633. CWE-79
Cross-site Scripting 		CVE-2016-10919 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269354 8.8 HIGH
Network 		supsystic photo_gallery The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF. CWE-352
 Origin Validation Error 		CVE-2016-10918 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269355 9.8 CRITICAL
Network 		search_everything_project search_everything The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316. CWE-89
SQL Injection 		CVE-2016-10917 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269356 9.8 CRITICAL
Network 		codepeople appointment_booking_calendar The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319. CWE-89
SQL Injection 		CVE-2016-10916 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269357 6.1 MEDIUM
Network 		pojo activity_log The aryo-activity-log plugin before 2.3.3 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10891 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269358 6.1 MEDIUM
Network 		matchboxdesigngroup universal_analytics The universal-analytics plugin before 1.3.1 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10912 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269359 6.1 MEDIUM
Network 		cozmoslabs profile_builder The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2016-10911 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
269360 6.1 MEDIUM
Network 		formbuilder_project formbuilder The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2016-10910 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm