Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256331 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0871 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
256332 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0865 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
256333 5 警告 オラクル - Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0861 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
256334 7.6 危険 マイクロソフト - Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0483 2010-05-12 15:20 2010-03-2 Show GitHub Exploit DB Packet Storm
256335 7.1 危険 マイクロソフト - Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3676 2010-05-12 15:20 2009-11-13 Show GitHub Exploit DB Packet Storm
256336 5.8 警告 オラクル - Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0868 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256337 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0859 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256338 4.3 警告 オラクル - Oracle Collaboration Suite の User Interface コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0881 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256339 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0855 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256340 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0086 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270911 6.5 MEDIUM
Network 		olevmedia olevmedia_shortcodes The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter. CWE-352
 Origin Validation Error 		CVE-2015-9421 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270912 6.1 MEDIUM
Network 		mightymess soundcloud_is_gold The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter. CWE-79
Cross-site Scripting 		CVE-2015-9420 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270913 6.1 MEDIUM
Network 		captain-slider_project captain-slider The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section. CWE-79
Cross-site Scripting 		CVE-2015-9419 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270914 4.3 MEDIUM
Network 		kibokolabs watupro The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes. CWE-352
 Origin Validation Error 		CVE-2015-9418 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270915 6.5 MEDIUM
Network 		slidervilla testimonial_slider The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS. CWE-352
 Origin Validation Error 		CVE-2015-9417 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270916 6.1 MEDIUM
Network 		onthegosystems sitepress-multilingual-cms The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header. CWE-79
Cross-site Scripting 		CVE-2015-9416 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270917 7.5 HIGH
Network 		angrycreative bj_lazy_load The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion. CWE-20
 Improper Input Validation  		CVE-2015-9415 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270918 6.1 MEDIUM
Network 		wpsymposiumpro wp-symposium The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter. CWE-79
Cross-site Scripting 		CVE-2015-9414 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270919 6.5 MEDIUM
Network 		eshop_project eshop The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter. CWE-352
 Origin Validation Error 		CVE-2015-9413 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm
270920 6.1 MEDIUM
Network 		royal-slider_project royal-slider The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter. CWE-79
Cross-site Scripting 		CVE-2015-9412 2024-11-21 11:40 2019-09-26 Show GitHub Exploit DB Packet Storm