Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228001 4.3 警告 SquirrelMail Project - SquirrelMail におけるクッキーをハイジャックされる脆弱性 - CVE-2006-3665 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228002 4.6 警告 finjan - Finjan Vital Security Appliance における権限を取得される脆弱性 - CVE-2006-3663 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228003 5.8 警告 pixelated by lev - PBL Guestbook の pblguestbook.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3617 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228004 4.3 警告 carbonize - Carbonize Lazarus Guestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3616 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228005 5.1 警告 Phorum - Phorum における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3615 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
228006 7.5 危険 orbitcoders - Orbitcoders OrbitMATRIX の index.php における SQL エラーを誘発される脆弱性 - CVE-2006-3614 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228007 5.8 警告 chamberland technology - Chamberland Technology ezWaiter Online におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3613 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228008 2.6 注意 Phorum - Phorum におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3612 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
228009 5.5 警告 Phorum - Phorum の pm.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3611 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
228010 5 警告 orbitcoders - Orbitcoders OrbitMATRIX の index.php における重要な情報を取得される脆弱性 - CVE-2006-3610 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211281 6.1 MEDIUM
Network 		neuvoo neuvoo-jobroll The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_keywords XSS. CWE-79
Cross-site Scripting 		CVE-2015-9404 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211282 6.1 MEDIUM
Network 		neuvoo neuvoo-jobroll The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_location XSS. CWE-79
Cross-site Scripting 		CVE-2015-9403 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211283 8.8 HIGH
Network 		usersultra users_ultra_membership The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2015-9402 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211284 4.8 MEDIUM
Network 		websimon-tables_project websimon-tables The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php edit_style id XSS. CWE-79
Cross-site Scripting 		CVE-2015-9401 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211285 8.8 HIGH
Network 		typomedia wordpress_meta_robots The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection. CWE-89
SQL Injection 		CVE-2015-9400 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211286 7.2 HIGH
Network 		trivetechnology wp-stats-dashboard The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection. CWE-89
SQL Injection 		CVE-2015-9399 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211287 8.8 HIGH
Network 		webmaster-source gocodes The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection. CWE-89
SQL Injection 		CVE-2015-9398 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211288 5.4 MEDIUM
Network 		webmaster-source gocodes The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS. CWE-79
Cross-site Scripting 		CVE-2015-9397 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211289 6.1 MEDIUM
Network 		attosoft auto_thickbox_plus The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS. CWE-79
Cross-site Scripting 		CVE-2015-9396 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm
211290 8.8 HIGH
Network 		usersultra users_ultra_membership The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action. CWE-89
SQL Injection 		CVE-2015-9395 2024-11-21 11:40 2019-09-21 Show GitHub Exploit DB Packet Storm