Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256331 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0871 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
256332 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0865 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
256333 5 警告 オラクル - Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0861 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
256334 7.6 危険 マイクロソフト - Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0483 2010-05-12 15:20 2010-03-2 Show GitHub Exploit DB Packet Storm
256335 7.1 危険 マイクロソフト - Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3676 2010-05-12 15:20 2009-11-13 Show GitHub Exploit DB Packet Storm
256336 5.8 警告 オラクル - Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0868 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256337 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0859 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256338 4.3 警告 オラクル - Oracle Collaboration Suite の User Interface コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0881 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256339 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0855 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
256340 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0086 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270921 7.2 HIGH
Network 		trivetechnology wp-stats-dashboard The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection. CWE-89
SQL Injection 		CVE-2015-9399 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270922 8.8 HIGH
Network 		webmaster-source gocodes The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection. CWE-89
SQL Injection 		CVE-2015-9398 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270923 5.4 MEDIUM
Network 		webmaster-source gocodes The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS. CWE-79
Cross-site Scripting 		CVE-2015-9397 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270924 6.1 MEDIUM
Network 		attosoft auto_thickbox_plus The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS. CWE-79
Cross-site Scripting 		CVE-2015-9396 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270925 8.8 HIGH
Network 		usersultra users_ultra_membership The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action. CWE-89
SQL Injection 		CVE-2015-9395 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270926 8.8 HIGH
Network 		usersultra users_ultra_membership The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php. CWE-352
 Origin Validation Error 		CVE-2015-9394 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270927 5.4 MEDIUM
Network 		usersultra users_ultra_membership The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter. CWE-79
Cross-site Scripting 		CVE-2015-9393 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270928 5.4 MEDIUM
Network 		usersultra users_ultra_membership The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter. CWE-79
Cross-site Scripting 		CVE-2015-9392 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270929 6.1 MEDIUM
Network 		ostenta yawpp The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter. CWE-79
Cross-site Scripting 		CVE-2015-9391 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
270930 4.3 MEDIUM
Network 		admin_management_xtended_project admin_management_xtended The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled. CWE-269
 Improper Privilege Management 		CVE-2015-9390 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm