Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252731	4.3	警告	株式会社ロックオン	-	EC-CUBE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0451	2011-02-2 14:01	2011-02-2	Show	GitHub Exploit DB Packet Storm

252732	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3644	2011-02-1 16:29	2010-11-4	Show	GitHub Exploit DB Packet Storm

252733	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3643	2011-02-1 16:28	2010-11-4	Show	GitHub Exploit DB Packet Storm

252734	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3642	2011-02-1 16:27	2010-11-4	Show	GitHub Exploit DB Packet Storm

252735	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3641	2011-02-1 16:26	2010-11-4	Show	GitHub Exploit DB Packet Storm

252736	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3640	2011-02-1 16:25	2010-11-4	Show	GitHub Exploit DB Packet Storm

252737	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3639	2011-02-1 16:24	2010-11-4	Show	GitHub Exploit DB Packet Storm

252738	9.3	危険	アドビシステムズオラクル	-	Adobe Flash Player の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3637	2011-02-1 16:23	2010-11-4	Show	GitHub Exploit DB Packet Storm

252739	2.6	注意	アップルアドビシステムズレッドハットオラクル	-	Flash Player におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3636	2011-02-1 16:20	2010-11-9	Show	GitHub Exploit DB Packet Storm

252740	8.5	危険	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL の dispatch_command 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2009-2446	2011-02-1 16:19	2009-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276591	-	db_backup_project	db_backup	Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.	CWE-22 Path Traversal	CVE-2014-9119	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276592	-	wp_limit_posts_automatically_project	wp_limit_posts_automatically	Cross-site request forgery (CSRF) vulnerability in the WP Limit Posts Automatically plugin 0.7 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for req…	CWE-352 Origin Validation Error	CVE-2014-9401	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276593	-	wp_unique_article_header_image_project	wp_unique_article_header_image	Multiple cross-site request forgery (CSRF) vulnerabilities in the Wp Unique Article Header Image plugin 1.0 and earlier for WordPress allow remote attackers to hijack the authentication of administra…	CWE-352 Origin Validation Error	CVE-2014-9400	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276594	-	tweetscribe_project	tweetscribe	Cross-site request forgery (CSRF) vulnerability in the TweetScribe plugin 1.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduc…	CWE-352 Origin Validation Error	CVE-2014-9399	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276595	-	twitter_liveblog_project	twitter_liveblog	Cross-site request forgery (CSRF) vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that…	CWE-352 Origin Validation Error	CVE-2014-9398	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276596	-	twimp-wp_project	twimp-wp	Cross-site request forgery (CSRF) vulnerability in the twimp-wp plugin for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site script…	CWE-352 Origin Validation Error	CVE-2014-9397	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276597	-	simpleflickr_project	simpleflickr	Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleFlickr plugin 3.0.3 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for request…	CWE-352 Origin Validation Error	CVE-2014-9396	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276598	-	simplelife_project	simplelife	Multiple cross-site request forgery (CSRF) vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2014-9395	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276599	-	pwgrandom_project	pwgrandom	Multiple cross-site request forgery (CSRF) vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2014-9394	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

276600	-	post_to_twitter_project	post_to_twitter	Multiple cross-site request forgery (CSRF) vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for reques…	CWE-352 Origin Validation Error	CVE-2014-9393	2024-11-21 11:20	2015-01-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed