Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224401 2.1 注意 FreeBSD - FreeBSD のカーネルにおけるカーネルメモリの一部を読まれる脆弱性 - CVE-2006-0380 2013-12-26 15:44 2006-01-25 Show GitHub Exploit DB Packet Storm
224402 5 警告 advantage century telecommunication - VxWorks 上で稼働する Advantage Century Telecommunication P202S IP Phone のファームウェアにおける誤った時間の情報を提供される脆弱性 - CVE-2006-0375 2013-12-26 15:44 2006-01-22 Show GitHub Exploit DB Packet Storm
224403 7.5 危険 advantage century telecommunication - Advantage Century Telecommunication P202S IP Phone のファームウェアにおける重要な情報を取得される脆弱性 CWE-287
CWE-DesignError
CVE-2006-0374 2013-12-26 15:44 2006-01-22 Show GitHub Exploit DB Packet Storm
224404 5 警告 ari pikivirta - Ari Pikivirta Home Ftp Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-0356 2013-12-26 15:44 2006-01-22 Show GitHub Exploit DB Packet Storm
224405 5 警告 qualityebiz - QualityEBiz Quality PPC の admin.php における重要な情報を取得される脆弱性 - CVE-2006-0216 2013-12-26 15:44 2006-01-16 Show GitHub Exploit DB Packet Storm
224406 7.5 危険 myphpim - MyPhPim の addresses.php3 における任意の PHP コードを実行される脆弱性 - CVE-2006-0169 2013-12-26 15:44 2006-01-11 Show GitHub Exploit DB Packet Storm
224407 7.5 危険 427bb - 427BB における認証を回避される脆弱性 - CVE-2006-0153 2013-12-26 15:44 2006-01-10 Show GitHub Exploit DB Packet Storm
224408 5 警告 amsn - aMSN におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-0138 2013-12-26 15:44 2006-01-9 Show GitHub Exploit DB Packet Storm
224409 5 警告 boastmachine - boastMachine における重要な情報を取得される脆弱性 - CVE-2006-0131 2013-12-26 15:44 2006-01-9 Show GitHub Exploit DB Packet Storm
224410 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3331 2013-12-26 14:42 2013-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197701 5.4 MEDIUM
Network 		web-settler form_builder The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users such as admin to set Cross-Site Scripting … - CVE-2021-24513 2024-11-21 14:53 2021-09-6 Show GitHub Exploit DB Packet Storm
197702 6.1 MEDIUM
Network 		gambit titan_framework The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected … CWE-79
Cross-site Scripting 		CVE-2021-24435 2024-11-21 14:53 2021-09-6 Show GitHub Exploit DB Packet Storm
197703 5.4 MEDIUM
Network 		simplygallery simply_gallery_blocks_with_lightbox A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user… - CVE-2021-24667 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
197704 5.4 MEDIUM
Network 		tipsandtricks-hq wp_video_lightbox The WP Video Lightbox WordPress plugin before 1.9.3 does not escape the attributes of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks CWE-79
Cross-site Scripting 		CVE-2021-24665 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
197705 5.4 MEDIUM
Network 		business_hours_indicator_project business_hours_indicator The Business Hours Indicator WordPress plugin before 2.3.5 does not sanitise or escape its 'Now closed message" setting when outputting it in the backend and frontend, leading to an Authenticated Sto… CWE-79
Cross-site Scripting 		CVE-2021-24593 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
197706 4.8 MEDIUM
Network 		yoohooplugins sitewide_notice The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attac… CWE-79
Cross-site Scripting 		CVE-2021-24592 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
197707 8.8 HIGH
Network 		blue-admin_project blue-admin The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plu… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24581 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
197708 8.8 HIGH
Network 		wow-estore side_menu The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue CWE-89
SQL Injection 		CVE-2021-24580 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
197709 8.8 HIGH
Network 		bold-themes bold_page_builder The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a P… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-24579 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
197710 5.4 MEDIUM
Network 		wpmanageninja fluentsmtp The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SM… CWE-79
Cross-site Scripting 		CVE-2021-24528 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm