Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228571 4.3 警告 youjoomla - YJ Whois コンポーネントの modules/mod_yj_whois.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4233 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
228572 7.5 危険 ruven pillay - IIPImage Server の FastCGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4230 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
228573 4.3 警告 Xfig project - Xfig の u_bound.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4228 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
228574 6.8 警告 Xfig project - Xfig の f_readold.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4227 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
228575 7.1 危険 サン・マイクロシステムズ - Sun OpenSolaris のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2009-4226 2012-12-20 19:28 2009-12-3 Show GitHub Exploit DB Packet Storm
228576 7.5 危険 smartisoft - phpBazar における管理コントロールパネルへのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4222 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
228577 7.5 危険 smartisoft - phpBazar の classified.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4221 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
228578 7.5 危険 raphael mazoyer - PointComma の includes/classes/pctemplate.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4220 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
228579 7.5 危険 ringsworld - Flashlight Free Edition の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4205 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
228580 7.5 危険 ringsworld - Flashlight Free Edition の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4204 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194761 5.4 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block. - CVE-2021-24659 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194762 6.5 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify… - CVE-2021-24652 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194763 5.4 MEDIUM
Network 		wp_map_block_project wp_map_block The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting at… - CVE-2021-24643 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194764 5.4 MEDIUM
Network 		wpzoom recipe_card_blocks_for_gutenberg_\&_elementor The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block (such as ingredientsLayout, iconSet, steps, ingredi… - CVE-2021-24634 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194765 4.3 MEDIUM
Network 		wpdeveloper countdown_block The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents d… - CVE-2021-24633 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194766 6.1 MEDIUM
Network 		wpzoom recipe_card_blocks_for_gutenberg_\&_elementor The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue - CVE-2021-24632 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194767 4.8 MEDIUM
Network 		cozmoslabs translatepress The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still all… - CVE-2021-24610 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194768 4.8 MEDIUM
Network 		hu-manity cookie_notice_\&_compliance_for_gdpr_\/_ccpa The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high pri… - CVE-2021-24569 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194769 9.8 CRITICAL
Network 		schiocco support_board_-_chat_and_help_desk The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before… - CVE-2021-24741 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194770 7.2 HIGH
Network 		simple_schools_staff_directory_project simple_schools_staff_directory The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitr… - CVE-2021-24663 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm