Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225061 7.8 危険 Gummy Bear Studios - Gummy Bear Studios FTP Drive + HTTP Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3922 2013-11-28 12:02 2013-11-21 Show GitHub Exploit DB Packet Storm
225062 3.5 注意 CloudBees - CloudBees Jenkins 用 Build Failure Analyzer プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6374 2013-11-28 11:37 2013-11-20 Show GitHub Exploit DB Packet Storm
225063 5.5 警告 CloudBees - CloudBees Jenkins 用 Exclusion プラグインにおけるリソースを一覧表示される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6373 2013-11-28 11:37 2013-11-20 Show GitHub Exploit DB Packet Storm
225064 4.3 警告 PaloSanto Solutions - Elastix の xmlservices/E_book.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6608 2013-11-28 11:30 2012-11-19 Show GitHub Exploit DB Packet Storm
225065 3.5 注意 Moodle - Moodle の mod/quiz/report/responses/responses_table.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4525 2013-11-28 11:18 2013-11-25 Show GitHub Exploit DB Packet Storm
225066 6.8 警告 Moodle - Moodle の repository/filesystem/lib.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-4524 2013-11-28 11:17 2013-11-25 Show GitHub Exploit DB Packet Storm
225067 3.5 注意 Moodle - Moodle の message/lib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4523 2013-11-28 11:17 2013-11-25 Show GitHub Exploit DB Packet Storm
225068 5 警告 Moodle - Moodle の lib/filelib.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4522 2013-11-28 11:17 2013-11-25 Show GitHub Exploit DB Packet Storm
225069 4.3 警告 Splunk - Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6870 2013-11-28 11:03 2013-11-15 Show GitHub Exploit DB Packet Storm
225070 6.8 警告 HTTP-Body Project - Perl 用 HTTP-Body の HTTP::Body::Multipart における攻撃を行われる脆弱性 CWE-noinfo
情報不足 		CVE-2013-4407 2013-11-27 18:17 2013-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196901 5.3 MEDIUM
Network 		yoast yoast_seo The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify ot… - CVE-2021-25118 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196902 6.1 MEDIUM
Network 		i-plugins whmcs_bridge The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting - CVE-2021-25112 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196903 6.5 MEDIUM
Network 		wpgooglemap wp_google_map The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 does not have CSRF checks in most of its AJAX actions, which could allow attackers to make logged in admins delete arbitrary posts … - CVE-2021-25081 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196904 5.4 MEDIUM
Network 		plugins-market wp_visitor_statistics_\(real_time_traffic\) The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.5 does not have authorisation and CSRF checks in the updateIpAddress AJAX action, allowing any authenticated user to call it, o… - CVE-2021-25042 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196905 6.1 MEDIUM
Network 		wp_user_project wp_user The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortcode is used, leading to Reflected Cross-Site Scripting issues - CVE-2021-25034 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196906 5.7 MEDIUM
Network 		wpgooglemap wp_google_map The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscri… CWE-352
 Origin Validation Error 		CVE-2021-25011 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196907 9.6 CRITICAL
Network 		postsnippets post_snippets The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers ar… - CVE-2021-25010 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196908 6.1 MEDIUM
Network 		wpvivid migration\
_backup\
_staging 		The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated re… - CVE-2021-24994 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196909 6.1 MEDIUM
Network 		use_any_font_project use_any_font The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will the… CWE-862
 Missing Authorization 		CVE-2021-24977 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196910 5.4 MEDIUM
Network 		magnigenie wp_responsive_menu The WP Responsive Menu WordPress plugin before 3.1.7.1 does not have capability and CSRF checks in the wpr_live_update AJAX action, as well as do not sanitise and escape some of the data submitted. A… - CVE-2021-24971 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm