Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228591 7.5 危険 tw productfinder - TYPO3 用の TW Productfinder エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4163 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 Piwik
teethgrinder.co.uk		 - Piwik などの製品で使用される Open Flash Chart Lug Wyrm Charmer における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4140 2012-12-20 19:28 2009-10-21 Show GitHub Exploit DB Packet Storm
228593 7.5 危険 Piwik - Piwik の core/Cookie.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4137 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
228594 9.3 危険 wikipedia - Firefox の Wikipedia Toolbar エクステンションにおける Chrome 権限を伴う任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4127 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
228595 10 危険 Ruby-lang.org - Ruby の string.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4124 2012-12-20 19:28 2009-12-11 Show GitHub Exploit DB Packet Storm
228596 3.5 注意 TYPSoft - TYPSoft FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4105 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228597 9.3 危険 robo-ftp - Robo-FTP におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4103 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228598 9.3 危険 Yoono - Firefox 用の Yoono における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4100 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228599 7.5 危険 scriptlerim - RADIO istek scripti におけるユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-4096 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
228600 4.3 警告 simplog - Simplog の comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4093 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194771 6.1 MEDIUM
Network 		limit_login_attempts_project limit_login_attempts The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-For) of attempted logins before outputtin… - CVE-2021-24657 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194772 5.4 MEDIUM
Network 		gutenslider gutenslider The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site… - CVE-2021-24640 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194773 8.1 HIGH
Network 		ffw omgf The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary… - CVE-2021-24639 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194774 9.1 CRITICAL
Network 		ffw omgf The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file … - CVE-2021-24638 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194775 5.4 MEDIUM
Network 		fontsplugin fonts The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scrip… - CVE-2021-24637 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194776 8.1 HIGH
Network 		print_my_blog_project print_my_blog The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved … - CVE-2021-24636 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194777 5.4 MEDIUM
Network 		bootstrapped visual_link_preview The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated u… CWE-862
 Missing Authorization 		CVE-2021-24635 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194778 5.4 MEDIUM
Network 		wbolt donate_with_qrcode The Donate With QRCode WordPress plugin before 1.4.5 does not sanitise or escape its QRCode Image setting, which result into a Stored Cross-Site Scripting (XSS). Furthermore, the plugin also does not… - CVE-2021-24618 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194779 4.8 MEDIUM
Network 		dfactory post_views_counter The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the f… - CVE-2021-24613 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194780 4.8 MEDIUM
Network 		wp_mapa_politico_espana_project wp_mapa_politico_espana The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Sc… - CVE-2021-24609 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm