Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228221 3.3 注意 saini - VideoCache の vccleaner における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-4454 2012-12-20 19:28 2009-12-29 Show GitHub Exploit DB Packet Storm
228222 8.8 危険 softcab - SoftCab Sound Converter ActiveX コントロール における任意のファイルを作成される脆弱性 CWE-Other
その他 		CVE-2009-4453 2012-12-20 19:28 2009-12-29 Show GitHub Exploit DB Packet Storm
228223 4.3 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4443 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228224 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2009-4442 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228225 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4441 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228226 6.8 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS における認証されたユーザのバックエンドの接続をハイジャックされる脆弱性 CWE-362
競合状態 		CVE-2009-4440 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228227 7.5 危険 VirtueMart - VirtueMart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4430 2012-12-20 19:28 2009-12-28 Show GitHub Exploit DB Packet Storm
228228 7.5 危険 weentech - weenCompany の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4423 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228229 5 警告 Zend Technologies Ltd. - Zend Framework の Zend_Log_Writer_Mail クラスにおける任意の電子メールメッセージを送信される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4417 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228230 4.3 警告 phpgroupware - phpGroupWare の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4416 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194721 4.8 MEDIUM
Network 		emarketdesign customer_service_software_\&_support_ticket_system The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users t… - CVE-2021-24622 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194722 6.1 MEDIUM
Network 		gamepress_project gamepress The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues - CVE-2021-24617 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194723 5.4 MEDIUM
Network 		wechat_reward_project wechat_reward The Wechat Reward WordPress plugin through 1.7 does not sanitise or escape its QR settings, nor has any CSRF check in place, allowing attackers to make a logged in admin change the settings and perfo… - CVE-2021-24615 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194724 4.8 MEDIUM
Network 		sociable_project sociable The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scri… CWE-79
Cross-site Scripting 		CVE-2021-24612 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194725 6.5 MEDIUM
Network 		wp_cookie_choice_project wp_cookie_choice The Wp Cookie Choice WordPress plugin through 1.1.0 is lacking any CSRF check when saving its options, and do not escape them when outputting them in attributes. As a result, an attacker could make a… - CVE-2021-24595 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194726 4.8 MEDIUM
Network 		planso planso_forms The PlanSo Forms WordPress plugin through 2.6.3 does not escape the title of its Form before outputting it in attributes, allowing high privilege users such as admin to set XSS payload in it, even wh… - CVE-2021-24516 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194727 5.4 MEDIUM
Network 		bplugins streamcast_radio_player The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scr… - CVE-2021-24416 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194728 5.4 MEDIUM
Network 		bplugins polo_video_gallery The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contrib… - CVE-2021-24415 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194729 5.4 MEDIUM
Network 		bplugins easy_twitter_feed The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload… - CVE-2021-24413 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194730 5.4 MEDIUM
Network 		bplugins html5_audio_player The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-… - CVE-2021-24412 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm