Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258461	6.9	警告	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0237	2010-05-11 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

258462	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0236	2010-05-11 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

258463	4.7	警告	マイクロソフト	-	Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0235	2010-05-11 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

258464	4.7	警告	マイクロソフト	-	Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0234	2010-05-11 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258465	9.3	危険	マイクロソフト	-	Microsoft Windows Media Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0268	2010-05-10 19:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258466	9.3	危険	マイクロソフト	-	Microsoft Windows の MPEG Layer-3 オーディオコーデックにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0480	2010-05-10 19:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258467	9.3	危険	マイクロソフト	-	Microsoft Windows の Media Services におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0478	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258468	10	危険	マイクロソフト	-	Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0477	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258469	10	危険	マイクロソフト	-	Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0476	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258470	10	危険	マイクロソフト	-	Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0270	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
288101	6.1	MEDIUM Network	ultimate-weather_project	ultimate-weather	The ultimate-weather plugin 1.0 for WordPress has XSS	CWE-79 Cross-site Scripting	CVE-2014-4561	2024-11-21 11:10	2020-01-10	Show	GitHub Exploit DB Packet Storm

288102	6.1	MEDIUM Network	flog_project	flog	flog plugin 0.1 for WordPress has XSS	CWE-79 Cross-site Scripting	CVE-2014-4530	2024-11-21 11:10	2020-01-10	Show	GitHub Exploit DB Packet Storm

288103	6.1	MEDIUM Network	spreadshirt-rss-3d-cube-flash-gallery_project	spreadshirt-rss-3d-cube-flash-gallery	Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters.	CWE-79 Cross-site Scripting	CVE-2014-4553	2024-11-21 11:10	2020-01-3	Show	GitHub Exploit DB Packet Storm

288104	6.1	MEDIUM Network	visualshortcodes	ninja	Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2014-4550	2024-11-21 11:10	2019-12-28	Show	GitHub Exploit DB Packet Storm

288105	6.1	MEDIUM Network	katz	infusionsoft_gravity_forms	Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers t…	CWE-79 Cross-site Scripting	CVE-2014-4536	2024-11-21 11:10	2019-12-28	Show	GitHub Exploit DB Packet Storm

288106	6.1	MEDIUM Network	import_legacy_media_project	import_legacy_media	Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to g…	CWE-79 Cross-site Scripting	CVE-2014-4535	2024-11-21 11:10	2019-12-28	Show	GitHub Exploit DB Packet Storm

288107	6.1	MEDIUM Network	videowhisper	video_comments_webcam_recorder	Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers …	CWE-79 Cross-site Scripting	CVE-2014-4567	2024-11-21 11:10	2019-12-28	Show	GitHub Exploit DB Packet Storm

288108	6.1	MEDIUM Network	cybercompany	swipehq-payment-gateway-woocommerce	Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2014-4558	2024-11-21 11:10	2019-12-28	Show	GitHub Exploit DB Packet Storm

288109	6.1	MEDIUM Network	ruven-toolkit_project	ruven-toolkit	Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup pa…	CWE-79 Cross-site Scripting	CVE-2014-4548	2024-11-21 11:10	2019-12-28	Show	GitHub Exploit DB Packet Storm

288110	6.1	MEDIUM Network	podcast_channels_project	podcast_channels	Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to get…	CWE-79 Cross-site Scripting	CVE-2014-4544	2024-11-21 11:10	2019-12-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed