Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 4:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224441 4 警告 シスコシステムズ - Cisco Unified Communications Manager のディザスタリカバリシステムコンポーネントにおける重要なデバイス情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-6978 2013-12-25 13:41 2013-12-18 Show GitHub Exploit DB Packet Storm
224442 - - ヒューレット・パッカード - ** 削除 ** HP Autonomy Ultraseek におけるクロスサイトスクリプティングの脆弱性 - CVE-2013-6196 2013-12-25 13:40 2013-12-19 Show GitHub Exploit DB Packet Storm
224443 4.9 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5407 2013-12-25 12:34 2013-12-4 Show GitHub Exploit DB Packet Storm
224444 5 警告 IBM - IBM WebSphere Portal における重要なコンポーネント情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6723 2013-12-25 12:31 2013-12-20 Show GitHub Exploit DB Packet Storm
224445 4.3 警告 IBM - IBM WebSphere Portal の Web Content Manager UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6328 2013-12-25 12:30 2013-12-20 Show GitHub Exploit DB Packet Storm
224446 4.3 警告 IBM - IBM WebSphere Portal における重要なプロパティ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6316 2013-12-25 12:30 2013-12-20 Show GitHub Exploit DB Packet Storm
224447 4.3 警告 IBM - IBM Security Access Manager for Enterprise Single Sign-On の IMS サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5421 2013-12-25 12:29 2013-12-20 Show GitHub Exploit DB Packet Storm
224448 4.9 警告 IBM - IBM WebSphere Portal におけるデータを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4012 2013-12-25 12:29 2013-12-20 Show GitHub Exploit DB Packet Storm
224449 4.3 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-5413 2013-12-25 12:27 2013-12-4 Show GitHub Exploit DB Packet Storm
224450 4.3 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway におけるリンクを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5411 2013-12-25 12:27 2013-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197701 6.1 MEDIUM
Network 		algolplus advanced_order_export_for_woocommerce This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS. CWE-79
Cross-site Scripting 		CVE-2021-24169 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197702 5.4 MEDIUM
Network 		easy_contact_form_pro_project easy_contact_form_pro The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields (such as Email Subject, Email Recipient, etc) when creating or editing a form, leading to an authen… CWE-79
Cross-site Scripting 		CVE-2021-24168 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197703 7.5 HIGH
Network 		web-stat web-stat When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send an XMLHttpRequest request to https://wts2.one/ajax.htm?action=lookup_WP_account. CWE-200
Information Exposure 		CVE-2021-24167 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197704 5.4 MEDIUM
Network 		ninjaforms ninja_forms The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attacker… CWE-352
 Origin Validation Error 		CVE-2021-24166 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197705 6.1 MEDIUM
Network 		ninjaforms ninja_forms In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was vulnerable to open redirect due to the use of a user supplied redirect parameter and no pr… CWE-601
Open Redirect 		CVE-2021-24165 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197706 4.3 MEDIUM
Network 		ninjaforms ninja_forms In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wp_ajax_nf_oauth, and retrieve the connection url needed to es… CWE-862
 Missing Authorization 		CVE-2021-24164 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197707 8.8 HIGH
Network 		ninjaforms ninja_forms The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it have any nonce protection, therefore making it possible for low-level users, such… CWE-862
 Missing Authorization 		CVE-2021-24163 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197708 8.8 HIGH
Network 		expresstech responsive_menu In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings. These settings could be modified to in… CWE-352
 Origin Validation Error 		CVE-2021-24162 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197709 8.8 HIGH
Network 		expresstech responsive_menu In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attack… CWE-352
 Origin Validation Error 		CVE-2021-24161 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
197710 8.8 HIGH
Network 		expresstech responsive_menu In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These f… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-24160 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm