Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224371 5 警告 activecampaign - ActiveCampaign SupportTrio におけるサーバの絶対パスを取得される脆弱性 - CVE-2006-1488 2013-12-26 15:44 2006-03-29 Show GitHub Exploit DB Packet Storm
224372 5 警告 desiderata software - Blazix Web Server における JSP ファイルのソースコードを取得される脆弱性 - CVE-2006-1483 2013-12-26 15:44 2006-03-29 Show GitHub Exploit DB Packet Storm
224373 5 警告 annuaire - Annuaire (Directory) における重要な情報を取得される脆弱性 - CVE-2006-1433 2013-12-26 15:44 2006-04-3 Show GitHub Exploit DB Packet Storm
224374 5 警告 brain book software - AdMan における絶対パスを取得される脆弱性 - CVE-2006-1375 2013-12-26 15:44 2006-03-24 Show GitHub Exploit DB Packet Storm
224375 7.2 危険 AVAST Software s.r.o. - avast! Antivirus における権限を取得される脆弱性 - CVE-2006-1355 2013-12-26 15:44 2006-03-22 Show GitHub Exploit DB Packet Storm
224376 10 危険 himpfen consulting - Himpfen Consulting Company PHP SimpleNEWS の admin.php における認証を回避される脆弱性 - CVE-2006-1276 2013-12-26 15:44 2006-03-19 Show GitHub Exploit DB Packet Storm
224377 5 警告 sa-exim - sa-exim の greylistclean.cron における任意のファイルを削除される脆弱性 CWE-94
コード・インジェクション 		CVE-2006-1251 2013-12-26 15:44 2006-03-19 Show GitHub Exploit DB Packet Storm
224378 2.6 注意 アドビシステムズ - Adobe Graphics Server および Adobe Document Server におけるファイルを読まれる脆弱性 - CVE-2006-1182 2013-12-26 15:44 2006-03-16 Show GitHub Exploit DB Packet Storm
224379 6.5 警告 EFS Software - Easy File Sharing Web Server における絶対パストラバーサルの脆弱性 - CVE-2006-1161 2013-12-26 15:44 2006-03-12 Show GitHub Exploit DB Packet Storm
224380 5 警告 aztek forum - Aztek Forum における重要な情報を取得される脆弱性 - CVE-2006-1112 2013-12-26 15:44 2006-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197711 6.1 MEDIUM
Network 		email-subscriber_project email-subscriber The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST… CWE-79
Cross-site Scripting 		CVE-2021-24556 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197712 8.8 HIGH
Network 		roosty diary-availability-calendar The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or… - CVE-2021-24555 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197713 7.2 HIGH
Network 		freelancetoindia paytm-pay The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authent… - CVE-2021-24554 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197714 7.2 HIGH
Network 		timeline_calendar_project timeline_calendar The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL… - CVE-2021-24553 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197715 7.2 HIGH
Network 		simple_events_calendar_project simple_events_calendar The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parameter before using it in a SQL statement when deleting events, leading to an auth… - CVE-2021-24552 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197716 9.8 CRITICAL
Network 		edit_comments_project edit_comments The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter before using it in a SQL statement, leading to a SQL injection issue - CVE-2021-24551 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197717 7.2 HIGH
Network 		broken_link_manager_project broken_link_manager The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an aut… - CVE-2021-24550 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197718 4.9 MEDIUM
Network 		aceide_project aceide The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, such as to read arbitrary files from the s… - CVE-2021-24549 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197719 5.4 MEDIUM
Network 		kn_fix_your_title_project kn_fix_your_title The KN Fix Your Title WordPress plugin through 1.0.1 was vulnerable to Authenticated Stored XSS in the separator field. - CVE-2021-24547 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
197720 4.8 MEDIUM
Network 		webfactoryltd maintenance The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site Scripting payload in them (even when the un… CWE-79
Cross-site Scripting 		CVE-2021-24533 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm