Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258791 5 警告 アップル - Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-0521 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258792 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4214 2010-04-16 16:58 2009-12-7 Show GitHub Exploit DB Packet Storm
258793 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3009 2010-04-16 16:58 2009-09-8 Show GitHub Exploit DB Packet Storm
258794 7.5 危険 アップル
Ruby on Rails project		 - Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-2422 2010-04-16 16:57 2009-07-10 Show GitHub Exploit DB Packet Storm
258795 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0526 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
258796 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0520 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
258797 6.8 警告 アップル - Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0519 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
258798 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0518 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
258799 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0517 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
258800 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0516 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276541 7.5 HIGH
Network 		ionadas history_collection The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter. CWE-22
Path Traversal 		CVE-2015-9470 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276542 4.8 MEDIUM
Network 		cybercraftit content-grabber The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id. CWE-79
Cross-site Scripting 		CVE-2015-9469 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276543 6.1 MEDIUM
Network 		k-78 broken_link_manager The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action. CWE-79
Cross-site Scripting 		CVE-2015-9468 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276544 9.8 CRITICAL
Network 		k-78 broken_link_manager The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter. CWE-89
SQL Injection 		CVE-2015-9467 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276545 9.8 CRITICAL
Network 		webtechideas wti_like_post The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED vari… CWE-89
SQL Injection 		CVE-2015-9466 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276546 8.8 HIGH
Network 		yet_another_stars_rating_project yet_another_stars_rating The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter. CWE-89
SQL Injection 		CVE-2015-9465 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276547 7.5 HIGH
Network 		s3bubble s3bubble-amazon-s3-audio-streaming The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter. CWE-22
Path Traversal 		CVE-2015-9463 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276548 7.5 HIGH
Network 		s3bubble s3bubble-amazon-s3-html-5-video-with-adverts The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter. CWE-22
Path Traversal 		CVE-2015-9464 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276549 7.2 HIGH
Network 		awesome_filterable_portfolio_project awesome_filterable_portfolio The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter. CWE-89
SQL Injection 		CVE-2015-9462 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
276550 7.2 HIGH
Network 		brinidesigner awesome_filterable_portfolio The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter. CWE-89
SQL Injection 		CVE-2015-9461 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm