Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228111 6.8 警告 supachai teasakul - Joomla! 用の Sweety Keeper コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1474 2012-12-20 19:29 2010-04-19 Show GitHub Exploit DB Packet Storm
228112 6.8 警告 ternaria - Joomla! 用の Ternaria Informatica JProject Manager コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1469 2012-12-20 19:29 2010-04-19 Show GitHub Exploit DB Packet Storm
228113 9.3 危険 trellian - Trellian FTP クライアントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1465 2012-12-20 19:29 2010-04-16 Show GitHub Exploit DB Packet Storm
228114 4.3 警告 WebAsyst - WebAsyst Shop-Script FREE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1464 2012-12-20 19:29 2010-04-16 Show GitHub Exploit DB Packet Storm
228115 7.5 危険 webasyst llc - WebAsyst Shop-Script FREE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1463 2012-12-20 19:29 2010-04-16 Show GitHub Exploit DB Packet Storm
228116 10 危険 webasyst llc - WebAsyst Shop-Script FREE におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1462 2012-12-20 19:29 2010-04-16 Show GitHub Exploit DB Packet Storm
228117 6.8 警告 tweakfs - FSX 用の Create and Extract Zips TweakFS Zip Utility におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1458 2012-12-20 19:29 2010-04-20 Show GitHub Exploit DB Packet Storm
228118 4.3 警告 Piwik - Piwik の Login フォームにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1453 2012-12-20 19:29 2010-04-15 Show GitHub Exploit DB Packet Storm
228119 5 警告 レッドハット - Red Hat JBoss Enterprise Application Platform における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1429 2012-12-20 19:29 2010-04-27 Show GitHub Exploit DB Packet Storm
228120 4.3 警告 PreProject.com - Pre Classified Listings ASP の signup.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1371 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194731 5.7 MEDIUM
Network 		catchplugins catch_scroll_progress_bar
catch_sticky_menu
catch_themes_demo_import
catch_under_construction
catch_web_tools
essential_content_types
generate_child_theme
header_enhancement
t… 		Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essen… CWE-352
 Origin Validation Error 		CVE-2021-24752 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194732 4.8 MEDIUM
Network 		gvectors wpdiscuz The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users… - CVE-2021-24737 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194733 5.4 MEDIUM
Network 		ayecode geodirectory The GeoDirectory Business Directory WordPress plugin before 2.1.1.3 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS). - CVE-2021-24720 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194734 6.1 MEDIUM
Network 		kriesi enfold The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder. CWE-79
Cross-site Scripting 		CVE-2021-24719 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194735 5.4 MEDIUM
Network 		dwbooster appointment_hour_booking The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars. CWE-79
Cross-site Scripting 		CVE-2021-24712 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194736 8.8 HIGH
Network 		tipsandtricks-hq software_license_manager The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack - CVE-2021-24711 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194737 4.8 MEDIUM
Network 		awplife weather_effect The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting … - CVE-2021-24709 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194738 4.8 MEDIUM
Network 		expresstech quiz_and_survey_master The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to perform Cross-Site Scr… - CVE-2021-24691 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194739 5.4 MEDIUM
Network 		kibokolabs chained_quiz The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings. - CVE-2021-24690 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm
194740 5.4 MEDIUM
Network 		awplife weather_effect The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting i… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24683 2024-11-21 14:53 2021-10-11 Show GitHub Exploit DB Packet Storm