Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228011	4.3	警告	orbitcoders	-	Orbitcoders OrbitMATRIX の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3609	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228012	4.6	警告	flatnuke	-	Simone Vellei Flatnuke の Gallery モジュールにおける任意の PHP コードを実行される脆弱性	-	CVE-2006-3608	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228013	4.3	警告	softbiz	-	Softbiz Banner Exchange Script におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3607	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228014	5	警告	マイクロソフト	-	Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3605	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228015	7.5	危険	seyeon	-	FlexWATCH Network Camera におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-3604	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228016	5.8	警告	seyeon	-	FlexWATCH Network Camera の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3603	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228017	5	警告	farsinews	-	FarsiNews の jscripts/tiny_mce/tiny_mce_gzip.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-3602	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228018	5.1	警告	libtunepimp	-	TunePimp の LookupTRM::lookup 関数におけるスタックベースのバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-3600	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228019	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Nuke Advanced Classifieds モジュールにおける SQL インジェクションの脆弱性	-	CVE-2006-3599	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

228020	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Sections モジュールにおける SQL インジェクションの脆弱性	-	CVE-2006-3598	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211261	6.5	MEDIUM Network	doc4design	multicons	The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter.	CWE-352 Origin Validation Error	CVE-2015-9424	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211262	5.4	MEDIUM Network	simplysymphony	plugnedit	The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditBGColor, PlugneditEditorMargin, plugnedit…	CWE-79 Cross-site Scripting	CVE-2015-9423	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211263	6.5	MEDIUM Network	simplysymphony	plugnedit	The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, …	CWE-352 Origin Validation Error	CVE-2015-9422	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211264	6.5	MEDIUM Network	olevmedia	olevmedia_shortcodes	The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.	CWE-352 Origin Validation Error	CVE-2015-9421	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211265	6.1	MEDIUM Network	mightymess	soundcloud_is_gold	The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.	CWE-79 Cross-site Scripting	CVE-2015-9420	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211266	6.1	MEDIUM Network	captain-slider_project	captain-slider	The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.	CWE-79 Cross-site Scripting	CVE-2015-9419	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211267	4.3	MEDIUM Network	kibokolabs	watupro	The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.	CWE-352 Origin Validation Error	CVE-2015-9418	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211268	6.5	MEDIUM Network	slidervilla	testimonial_slider	The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.	CWE-352 Origin Validation Error	CVE-2015-9417	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211269	6.1	MEDIUM Network	onthegosystems	sitepress-multilingual-cms	The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.	CWE-79 Cross-site Scripting	CVE-2015-9416	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

211270	7.5	HIGH Network	angrycreative	bj_lazy_load	The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.	CWE-20 Improper Input Validation	CVE-2015-9415	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm