Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228671 4.3 警告 tangocms - TangoCMS の application/libraries/Html.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2376 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
228672 6.8 警告 wxwidgets - wxWidgets の src/common/image.cpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2369 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
228673 9.3 危険 yukudr - KUDRSOFT AudioPLUS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2363 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
228674 9.3 危険 yukudr - KUDRSOFT AudioPLUS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2362 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
228675 7.5 危険 yasinkaplan - TekRADIUS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2359 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228676 4.6 警告 yasinkaplan - TekRADIUS における難読化したデータベース資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2358 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228677 10 危険 yasinkaplan - TekRADIUS のデフォルト設定におけるデータベースへのアクセス権限を取得される脆弱性 CWE-16
環境設定 		CVE-2009-2357 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228678 4 警告 dan cahill - NullLogic Groupware のフォーラムモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-2355 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228679 9 危険 Sourcefire - Sourcefire DC および 3D Sensor の Web ベースの管理インターフェースにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2344 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228680 4.3 警告 Zoph - Zoph の people.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2343 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194721 4.8 MEDIUM
Network 		emarketdesign customer_service_software_\&_support_ticket_system The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users t… - CVE-2021-24622 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194722 6.1 MEDIUM
Network 		gamepress_project gamepress The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues - CVE-2021-24617 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194723 5.4 MEDIUM
Network 		wechat_reward_project wechat_reward The Wechat Reward WordPress plugin through 1.7 does not sanitise or escape its QR settings, nor has any CSRF check in place, allowing attackers to make a logged in admin change the settings and perfo… - CVE-2021-24615 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194724 4.8 MEDIUM
Network 		sociable_project sociable The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scri… CWE-79
Cross-site Scripting 		CVE-2021-24612 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194725 6.5 MEDIUM
Network 		wp_cookie_choice_project wp_cookie_choice The Wp Cookie Choice WordPress plugin through 1.1.0 is lacking any CSRF check when saving its options, and do not escape them when outputting them in attributes. As a result, an attacker could make a… - CVE-2021-24595 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194726 4.8 MEDIUM
Network 		planso planso_forms The PlanSo Forms WordPress plugin through 2.6.3 does not escape the title of its Form before outputting it in attributes, allowing high privilege users such as admin to set XSS payload in it, even wh… - CVE-2021-24516 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194727 5.4 MEDIUM
Network 		bplugins streamcast_radio_player The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scr… - CVE-2021-24416 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194728 5.4 MEDIUM
Network 		bplugins polo_video_gallery The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contrib… - CVE-2021-24415 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194729 5.4 MEDIUM
Network 		bplugins easy_twitter_feed The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload… - CVE-2021-24413 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm
194730 5.4 MEDIUM
Network 		bplugins html5_audio_player The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-… - CVE-2021-24412 2024-11-21 14:53 2021-10-18 Show GitHub Exploit DB Packet Storm