Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252581 6.9 警告 Google - Android における Manifest.permission.CAMER および Manifest.permission.AUDIO_RECORD の設定を回避される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2348 2011-02-23 15:19 2009-05-26 Show GitHub Exploit DB Packet Storm
252582 7.5 危険 Google - Android の PackageManagerService クラスにおけるアプリケーションのデータにアクセスされる脆弱性 CWE-287
不適切な認証
CVE-2009-1754 2011-02-23 15:17 2009-05-26 Show GitHub Exploit DB Packet Storm
252583 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイス上で稼働する emWEB におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4677 2011-02-23 15:14 2011-01-7 Show GitHub Exploit DB Packet Storm
252584 6.8 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4676 2011-02-23 15:11 2011-01-7 Show GitHub Exploit DB Packet Storm
252585 9 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4675 2011-02-23 15:09 2011-01-7 Show GitHub Exploit DB Packet Storm
252586 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4673 2011-02-23 15:05 2011-01-7 Show GitHub Exploit DB Packet Storm
252587 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4672 2011-02-23 14:59 2011-01-7 Show GitHub Exploit DB Packet Storm
252588 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5037 2011-02-23 14:56 2011-01-7 Show GitHub Exploit DB Packet Storm
252589 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4692 2011-02-23 14:54 2011-01-7 Show GitHub Exploit DB Packet Storm
252590 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4691 2011-02-23 14:50 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265991 6.1 MEDIUM
Network
sir gnucommerce The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10920 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265992 6.1 MEDIUM
Network
wassup_real_time_analytics_project wassup_real_time_analytics The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633. CWE-79
Cross-site Scripting
CVE-2016-10919 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265993 8.8 HIGH
Network
supsystic photo_gallery The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF. CWE-352
 Origin Validation Error
CVE-2016-10918 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265994 9.8 CRITICAL
Network
search_everything_project search_everything The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316. CWE-89
SQL Injection
CVE-2016-10917 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265995 9.8 CRITICAL
Network
codepeople appointment_booking_calendar The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319. CWE-89
SQL Injection
CVE-2016-10916 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265996 6.1 MEDIUM
Network
pojo activity_log The aryo-activity-log plugin before 2.3.3 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10891 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265997 6.1 MEDIUM
Network
matchboxdesigngroup universal_analytics The universal-analytics plugin before 1.3.1 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10912 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265998 6.1 MEDIUM
Network
cozmoslabs profile_builder The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting
CVE-2016-10911 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
265999 6.1 MEDIUM
Network
formbuilder_project formbuilder The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting
CVE-2016-10910 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266000 9.8 CRITICAL
Network
codepeople booking_calendar_contact_form The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection. CWE-89
SQL Injection
CVE-2016-10909 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm