Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 4.3 警告 phpscriptsnow - PHP Scripts Now Astrology の celebrities.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4685 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228452 7.5 危険 Scriptsez.net - Good/Bad Vote の vote.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4683 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228453 4.3 警告 Scriptsez.net - Good/Bad Vote の vote.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4682 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228454 4.3 警告 php directory source - phpDirectorySource の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4681 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228455 7.5 危険 php directory source - phpDirectorySource の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4680 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
228456 4.3 警告 Winn GuestBook - Winn Guestbook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4678 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
228457 6.5 警告 phpmember - WebMember の form.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4667 2012-12-20 19:28 2010-03-5 Show GitHub Exploit DB Packet Storm
228458 7.5 危険 qualityunit - Webradev Download Protect における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4666 2012-12-20 19:28 2010-03-5 Show GitHub Exploit DB Packet Storm
228459 9.3 危険 quiksoft - Quiksoft EasyMail Objects ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4663 2012-12-20 19:28 2010-03-3 Show GitHub Exploit DB Packet Storm
228460 7.5 危険 templateplaza - Joomla! 用の tpdugg コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4628 2012-12-20 19:28 2010-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194621 7.2 HIGH
Network 		wpaffiliatemanager affiliates_manager The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL Injection issue CWE-89
SQL Injection 		CVE-2021-24844 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194622 5.3 MEDIUM
Network 		codesupply squaretype The Squaretype WordPress theme before 3.0.4 allows unauthenticated users to manipulate the query_vars used to retrieve the posts to display in one of its REST endpoint, without any validation. As a r… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2021-24840 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194623 4.3 MEDIUM
Network 		wp_seo_redirect_301_project wp_seo_redirect_301 The WP SEO Redirect 301 WordPress plugin before 2.3.2 does not have CSRF in place when deleting redirects, which could allow attackers to make a logged in admin delete them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2021-24832 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194624 8.8 HIGH
Network 		wp-buy visitor_traffic_real_time_statistics The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) befor… CWE-89
SQL Injection 		CVE-2021-24829 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194625 9.8 CRITICAL
Network 		asgaros asgaros_forum The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection i… CWE-89
SQL Injection 		CVE-2021-24827 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194626 4.3 MEDIUM
Network 		phoenix_media_rename_project phoenix_media_rename The Phoenix Media Rename WordPress plugin before 3.4.4 does not have capability checks in its phoenix_media_rename AJAX action, which could allow users with Author roles to rename any uploaded media … NVD-CWE-noinfo
CVE-2021-24816 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194627 5.4 MEDIUM
Network 		schiocco support_board The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting attacks by placing a payload in the notes field, when an administrator or any authe… CWE-79
Cross-site Scripting 		CVE-2021-24807 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194628 4.3 MEDIUM
Network 		gvectors wpdiscuz The wpDiscuz WordPress plugin before 7.3.4 does check for CSRF when adding, editing and deleting comments, which could allow attacker to make logged in users such as admin edit and delete arbitrary c… CWE-352
 Origin Validation Error 		CVE-2021-24806 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194629 4.3 MEDIUM
Network 		wp_survey_plus_project wp_survey_plus The WP Survey Plus WordPress plugin through 1.0 does not have any authorisation and CSRF checks in place in its AJAX actions, allowing any user to call them and add/edit/delete Surveys. Furthermore, … CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24801 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
194630 6.1 MEDIUM
Network 		androidbubbles wp_header_images The WP Header Images WordPress plugin before 2.0.1 does not sanitise and escape the t parameter before outputting it back in the plugin's settings page, leading to a Reflected Cross-Site Scripting is… CWE-79
Cross-site Scripting 		CVE-2021-24798 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm