Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255381 0 注意 アップル - Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0534 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
255382 5 警告 アップル - Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0523 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
255383 9 危険 アップル - Apple Mac OS X のサーバ管理における管理者権限の処理に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0522 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
255384 5 警告 アップル - Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-0521 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
255385 4.3 警告 アップル
Ruby on Rails project
- Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4214 2010-04-16 16:58 2009-12-7 Show GitHub Exploit DB Packet Storm
255386 4.3 警告 アップル
Ruby on Rails project
- Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3009 2010-04-16 16:58 2009-09-8 Show GitHub Exploit DB Packet Storm
255387 7.5 危険 アップル
Ruby on Rails project
- Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2009-2422 2010-04-16 16:57 2009-07-10 Show GitHub Exploit DB Packet Storm
255388 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0526 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
255389 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0520 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
255390 6.8 警告 アップル - Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0519 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268201 6.1 MEDIUM
Network
google_doc_embedder_project google_doc_embedder The google-document-embedder plugin before 2.6.2 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10881 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
268202 6.1 MEDIUM
Network
google_doc_embedder_project google_doc_embedder The google-document-embedder plugin before 2.6.1 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10880 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
268203 9.8 CRITICAL
Network
imagely nextgen_gallery The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name. CWE-89
SQL Injection
CVE-2016-10889 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
268204 6.1 MEDIUM
Network
tipsandtricks-hq all_in_one_wp_security_\&_firewall The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages. CWE-79
Cross-site Scripting
CVE-2016-10867 2024-11-21 11:44 2019-08-14 Show GitHub Exploit DB Packet Storm
268205 6.1 MEDIUM
Network
tipsandtricks-hq all_in_one_wp_security_\&_firewall The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting
CVE-2016-10866 2024-11-21 11:44 2019-08-14 Show GitHub Exploit DB Packet Storm
268206 6.1 MEDIUM
Network
ibericode mailchimp The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page. CWE-79
Cross-site Scripting
CVE-2016-10871 2024-11-21 11:44 2019-08-14 Show GitHub Exploit DB Packet Storm
268207 6.1 MEDIUM
Network
gtranslate google_language_translator The google-language-translator plugin before 5.0.06 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10870 2024-11-21 11:44 2019-08-14 Show GitHub Exploit DB Packet Storm
268208 6.1 MEDIUM
Network
bestwebsoft contact_form The contact-form-plugin plugin before 4.0.2 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10869 2024-11-21 11:44 2019-08-14 Show GitHub Exploit DB Packet Storm
268209 6.1 MEDIUM
Network
tipsandtricks-hq all_in_one_wp_security_\&_firewall The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages. CWE-79
Cross-site Scripting
CVE-2016-10868 2024-11-21 11:44 2019-08-14 Show GitHub Exploit DB Packet Storm
268210 6.1 MEDIUM
Network
ultimatemember ultimate_member The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form. CWE-79
Cross-site Scripting
CVE-2016-10872 2024-11-21 11:44 2019-08-13 Show GitHub Exploit DB Packet Storm