Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224291 5.8 警告 Mozilla Foundation - 複数の Mozilla 製品における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2013-6673 2014-01-10 18:34 2013-12-10 Show GitHub Exploit DB Packet Storm
224292 6.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の SpiderMonkey における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-5619 2014-01-10 18:20 2013-12-10 Show GitHub Exploit DB Packet Storm
224293 10 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript の実装における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5615 2014-01-10 18:17 2013-12-10 Show GitHub Exploit DB Packet Storm
224294 4.3 警告 Open-Xchange - Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6997 2014-01-10 16:31 2013-12-13 Show GitHub Exploit DB Packet Storm
224295 4 警告 シスコシステムズ - Cisco Unified Communications Manager の管理ポータルにおけるロールベースのアクセス制御を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0657 2014-01-10 16:26 2014-01-7 Show GitHub Exploit DB Packet Storm
224296 4 警告 シスコシステムズ - Cisco Context Directory Agent における特定のユーザインターフェースのデータの欠落を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0656 2014-01-10 16:25 2014-01-8 Show GitHub Exploit DB Packet Storm
224297 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの Identity Firewall 機能におけるユーザキャッシュのコンテンツを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0655 2014-01-10 16:24 2014-01-8 Show GitHub Exploit DB Packet Storm
224298 4.3 警告 シスコシステムズ - Cisco Context Directory Agent におけるキャッシュを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0654 2014-01-10 16:24 2014-01-9 Show GitHub Exploit DB Packet Storm
224299 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの Identity Firewall 機能における認証状態の変更を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0653 2014-01-10 16:23 2014-01-8 Show GitHub Exploit DB Packet Storm
224300 4.3 警告 シスコシステムズ - Cisco Context Directory Agent のマッピングページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0652 2014-01-10 16:22 2014-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197731 4.8 MEDIUM
Network 		dwbooster appointment_hour_booking The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when … - CVE-2021-24673 2024-11-21 14:53 2021-10-4 Show GitHub Exploit DB Packet Storm
197732 5.4 MEDIUM
Network 		wpeverest user_registration The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJA… CWE-79
Cross-site Scripting 		CVE-2021-24654 2024-11-21 14:53 2021-10-4 Show GitHub Exploit DB Packet Storm
197733 8.1 HIGH
Network 		meowapps meow_gallery The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL s… CWE-89
SQL Injection 		CVE-2021-24465 2024-11-21 14:53 2021-10-4 Show GitHub Exploit DB Packet Storm
197734 5.4 MEDIUM
Network 		mx_time_zone_clocks_project mx_time_zone_clocks The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the time_zone attribute of the mxmtzc_time_zone_clocks shortcode, allowing users with a role as low as Contributor to perform Sto… - CVE-2021-24671 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
197735 5.4 MEDIUM
Network 		status301 coolclock The CoolClock WordPress plugin before 4.3.5 does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks - CVE-2021-24670 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
197736 9.8 CRITICAL
Network 		podlove podlove_podcast_publisher The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an… - CVE-2021-24666 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
197737 4.3 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post… NVD-CWE-Other
CVE-2021-24661 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
197738 5.4 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting at… - CVE-2021-24660 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
197739 5.4 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block. - CVE-2021-24659 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
197740 6.5 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify… - CVE-2021-24652 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm