Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228401 4.3 警告 ViewVC - ViewVC の viewvc.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3618 2012-12-20 19:28 2009-08-11 Show GitHub Exploit DB Packet Storm
228402 7.6 危険 tatsuhiro tsujikawa - aria の src/AbstractCommand.cc におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2009-3617 2012-12-20 19:28 2009-10-20 Show GitHub Exploit DB Packet Storm
228403 8.5 危険 Fabrice Bellard - QEMU の VNC server におけるホストの OS 上で任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3616 2012-12-20 19:28 2009-10-23 Show GitHub Exploit DB Packet Storm
228404 9.3 危険 freedesktop.org - Poppler の glib/poppler-page.cc における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3607 2012-12-20 19:28 2009-10-21 Show GitHub Exploit DB Packet Storm
228405 4.3 警告 Scriptsez.net - Scriptsez Ultimate Poll の demo_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3601 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
228406 7.5 危険 vspanel - VS PANEL の results.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3595 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
228407 4.3 警告 qtmsoft - Qualiteam X-Cart の customer/home.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3592 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
228408 7.5 危険 vspanel - VS PANEL の showcat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3590 2012-12-20 19:28 2009-10-8 Show GitHub Exploit DB Packet Storm
228409 5 警告 sql-ledger - SQL-Ledger におけるクッキーをキャプチャされる脆弱性 CWE-16
環境設定 		CVE-2009-3584 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228410 5.1 警告 sql-ledger - SQL-Ledger の Preferences メニュー項目におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3583 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194691 4.8 MEDIUM
Network 		autoptimize autoptimize The Autoptimize WordPress plugin before 2.7.8 does not check for malicious files such as .html in the archive uploaded via the 'Import Settings' feature. As a result, it is possible for a high privil… - CVE-2021-24378 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194692 8.1 HIGH
Network 		autoptimize autoptimize The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' feature, however this is not sufficient to pro… - CVE-2021-24377 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194693 9.8 CRITICAL
Network 		autoptimize autoptimize The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Settings" feature, after its extraction. However, the extract… - CVE-2021-24376 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194694 5.3 MEDIUM
Network 		automattic jetpack The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was f… - CVE-2021-24374 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194695 6.1 MEDIUM
Network 		getastra wp_hardening The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflect… - CVE-2021-24373 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194696 6.1 MEDIUM
Network 		getastra wp_hardening The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-… CWE-79
Cross-site Scripting 		CVE-2021-24372 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194697 9.8 CRITICAL
Network 		radykal fancy_product_designer The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution. - CVE-2021-24370 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194698 5.4 MEDIUM
Network 		ayecode getpaid In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly… - CVE-2021-24369 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194699 5.4 MEDIUM
Network 		wp_config_file_editor_project wp_config_file_editor The WP Config File Editor WordPress plugin through 1.7.1 was affected by an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. - CVE-2021-24367 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm
194700 5.4 MEDIUM
Network 		admincolumns admin_columns The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and escape its Label settings, which could allow high privilege users such as admin t… - CVE-2021-24366 2024-11-21 14:52 2021-06-22 Show GitHub Exploit DB Packet Storm