Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228591 7.5 危険 tw productfinder - TYPO3 用の TW Productfinder エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4163 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 Piwik
teethgrinder.co.uk		 - Piwik などの製品で使用される Open Flash Chart Lug Wyrm Charmer における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4140 2012-12-20 19:28 2009-10-21 Show GitHub Exploit DB Packet Storm
228593 7.5 危険 Piwik - Piwik の core/Cookie.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4137 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
228594 9.3 危険 wikipedia - Firefox の Wikipedia Toolbar エクステンションにおける Chrome 権限を伴う任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4127 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
228595 10 危険 Ruby-lang.org - Ruby の string.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4124 2012-12-20 19:28 2009-12-11 Show GitHub Exploit DB Packet Storm
228596 3.5 注意 TYPSoft - TYPSoft FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4105 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228597 9.3 危険 robo-ftp - Robo-FTP におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4103 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228598 9.3 危険 Yoono - Firefox 用の Yoono における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4100 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228599 7.5 危険 scriptlerim - RADIO istek scripti におけるユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-4096 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228600 4.3 警告 simplog - Simplog の comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4093 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194761 5.4 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block. - CVE-2021-24659 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194762 6.5 MEDIUM
Network 		wpxpo postx_-_gutenberg_blocks_for_post_grid The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify… - CVE-2021-24652 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194763 5.4 MEDIUM
Network 		wp_map_block_project wp_map_block The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting at… - CVE-2021-24643 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194764 5.4 MEDIUM
Network 		wpzoom recipe_card_blocks_for_gutenberg_\&_elementor The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block (such as ingredientsLayout, iconSet, steps, ingredi… - CVE-2021-24634 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194765 4.3 MEDIUM
Network 		wpdeveloper countdown_block The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents d… - CVE-2021-24633 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194766 6.1 MEDIUM
Network 		wpzoom recipe_card_blocks_for_gutenberg_\&_elementor The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue - CVE-2021-24632 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194767 4.8 MEDIUM
Network 		cozmoslabs translatepress The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still all… - CVE-2021-24610 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194768 4.8 MEDIUM
Network 		hu-manity cookie_notice_\&_compliance_for_gdpr_\/_ccpa The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high pri… - CVE-2021-24569 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194769 9.8 CRITICAL
Network 		schiocco support_board_-_chat_and_help_desk The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before… - CVE-2021-24741 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194770 7.2 HIGH
Network 		simple_schools_staff_directory_project simple_schools_staff_directory The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitr… - CVE-2021-24663 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm