Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228511 4.3 警告 xstate - Xstate Real Estate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4478 2012-12-20 19:28 2009-12-30 Show GitHub Exploit DB Packet Storm
228512 7.5 危険 xstate - Xstate Real Estate の page.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4477 2012-12-20 19:28 2009-12-30 Show GitHub Exploit DB Packet Storm
228513 7.5 危険 phpope - PHPope における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4472 2012-12-20 19:28 2009-12-30 Show GitHub Exploit DB Packet Storm
228514 4.3 警告 Redmine - Redmine におけるクロスサイトスクリプティング (XSS) を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4459 2012-12-20 19:28 2009-12-30 Show GitHub Exploit DB Packet Storm
228515 7.5 危険 Provider4u - Vsftpd サーバ用の Vsftpd Webmin モジュールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-4457 2012-12-20 19:28 2009-12-29 Show GitHub Exploit DB Packet Storm
228516 3.3 注意 saini - VideoCache の vccleaner における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-4454 2012-12-20 19:28 2009-12-29 Show GitHub Exploit DB Packet Storm
228517 8.8 危険 softcab - SoftCab Sound Converter ActiveX コントロール における任意のファイルを作成される脆弱性 CWE-Other
その他 		CVE-2009-4453 2012-12-20 19:28 2009-12-29 Show GitHub Exploit DB Packet Storm
228518 4.3 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4443 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228519 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2009-4442 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228520 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4441 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194531 6.1 MEDIUM
Network 		booster booster_for_woocommerce The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter before outputting back in the admin dashboard when the General module is enabled, … CWE-79
Cross-site Scripting 		CVE-2021-25000 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
194532 6.1 MEDIUM
Network 		booster booster_for_woocommerce The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before outputting it back in the admin dashboard when the Pdf Invoicing module is enabl… CWE-79
Cross-site Scripting 		CVE-2021-24999 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
194533 4.8 MEDIUM
Network 		wpovernight woocommerce_pdf_invoices\&_packing_slips The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site… CWE-79
Cross-site Scripting 		CVE-2021-24991 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
194534 6.1 MEDIUM
Network 		geminilabs site_reviews The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenticated and any authenticated users), allo… CWE-79
Cross-site Scripting 		CVE-2021-24973 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
194535 6.1 MEDIUM
Network 		litespeedtech litespeed_cache The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specif… CWE-79
Cross-site Scripting 		CVE-2021-24964 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
194536 4.8 MEDIUM
Network 		litespeedtech litespeed_cache The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the JS code of an admin page, leading to a Reflected Cross-Site Scripting CWE-79
Cross-site Scripting 		CVE-2021-24963 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
194537 7.5 HIGH
Network 		simple_jwt_login_project simple_jwt_login The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the str_shuffle PHP function … CWE-330
 Use of Insufficiently Random Values 		CVE-2021-24998 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
194538 6.5 MEDIUM
Network 		wp-guppy wp_guppy The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them and could lead to sensitive information disclosure, such as … - CVE-2021-24997 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
194539 4.8 MEDIUM
Network 		buttonizer buttonizer The Smart Floating / Sticky Buttons WordPress plugin before 2.5.5 does not sanitise and escape some parameter before outputting them in attributes and page, which could allow high privilege users to … - CVE-2021-24992 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
194540 5.4 MEDIUM
Network 		wprssaggregator wp_rss_aggregator The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprss… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2021-24988 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm