Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227071 4.3 警告 Rack - Rack の lib/rack/multipart.rb におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-DesignError
CVE-2012-6109 2013-03-4 17:04 2013-01-8 Show GitHub Exploit DB Packet Storm
227072 2.1 注意 Ryan Dave - Ruby 用 ruby_parser gem における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0162 2013-03-4 16:59 2013-03-1 Show GitHub Exploit DB Packet Storm
227073 4.3 警告 レッドハット - Red Hat CloudFroms で使用される Ruby 用 ldap_fluff gem における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5604 2013-03-4 16:36 2013-03-1 Show GitHub Exploit DB Packet Storm
227074 1.9 注意 Fedora Project
レッドハット
- Red Hat Enterprise Linux および Fedora における ASLR 保護メカニズムを回避される脆弱性 CWE-noinfo
情報不足
CVE-2012-1568 2013-03-4 16:04 2012-03-15 Show GitHub Exploit DB Packet Storm
227075 4 警告 Linux - Linux Kernel の kernel/printk.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-1772 2013-03-4 15:57 2013-02-21 Show GitHub Exploit DB Packet Storm
227076 2.1 注意 Katello Project - Katello の script/katello-generate-passphrase におけるパスフレーズを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5561 2013-03-4 14:44 2013-03-1 Show GitHub Exploit DB Packet Storm
227077 6.1 警告 シスコシステムズ - Cisco Wireless LAN Controller におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-1141 2013-03-4 13:51 2013-02-27 Show GitHub Exploit DB Packet Storm
227078 5.8 警告 シスコシステムズ - Mac OS X 上で稼働する Cisco NAC エージェントにおける ISE サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2013-1124 2013-03-4 13:45 2013-02-27 Show GitHub Exploit DB Packet Storm
227079 7.8 危険 シスコシステムズ - Cisco Unified Presence Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-1137 2013-03-1 16:37 2012-02-27 Show GitHub Exploit DB Packet Storm
227080 7.1 危険 シスコシステムズ - Cisco Unified Communications Manager におけるキャッシュポイズニング攻撃を実行される脆弱性 CWE-287
不適切な認証
CVE-2013-1134 2013-03-1 16:36 2012-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195271 6.1 MEDIUM
Network
social_tape_project social_tape The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stor… - CVE-2021-24411 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
195272 6.1 MEDIUM
Network
telugu_bible_verse_daily_project telugu_bible_verse_daily The ?????? ?????? ??????? WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This co… CWE-352
 Origin Validation Error
CVE-2021-24410 2024-11-21 14:53 2021-08-16 Show GitHub Exploit DB Packet Storm
195273 6.1 MEDIUM
Network
properfraction profilepress The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.11's widget for tabbed login/register was not properly escaped and could b… - CVE-2021-24522 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
195274 7.2 HIGH
Network
wow-estore side_menu The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from the browser when building an SQL statement. Users with the administrator role … - CVE-2021-24521 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
195275 8.8 HIGH
Network
coderstimes out_of_stock_message_for_woocommerce The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor… - CVE-2021-24520 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
195276 5.4 MEDIUM
Network
a3rev page_view_count The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post m… - CVE-2021-24509 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
195277 9.8 CRITICAL
Network
brainstormforce astra The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (av… - CVE-2021-24507 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
195278 5.4 MEDIUM
Network
madeit forms The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (X… - CVE-2021-24505 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
195279 4.8 MEDIUM
Network
flippercode wp_google_map The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high privilege users, ev… - CVE-2021-24502 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
195280 8.1 HIGH
Network
amentotech workreap The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objec… - CVE-2021-24501 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm