Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228671 6.8 警告 wxwidgets - wxWidgets の src/common/image.cpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2369 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
228672 9.3 危険 yukudr - KUDRSOFT AudioPLUS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2363 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
228673 9.3 危険 yukudr - KUDRSOFT AudioPLUS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2362 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
228674 7.5 危険 yasinkaplan - TekRADIUS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2359 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228675 4.6 警告 yasinkaplan - TekRADIUS における難読化したデータベース資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2358 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228676 10 危険 yasinkaplan - TekRADIUS のデフォルト設定におけるデータベースへのアクセス権限を取得される脆弱性 CWE-16
環境設定 		CVE-2009-2357 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228677 4 警告 dan cahill - NullLogic Groupware のフォーラムモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-2355 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228678 9 危険 Sourcefire - Sourcefire DC および 3D Sensor の Web ベースの管理インターフェースにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2344 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228679 4.3 警告 Zoph - Zoph の people.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2343 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228680 7.5 危険 shalwan - Opial の albumdetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2341 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194731 7.2 HIGH
Network 		zavedil flightlog The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and admin… - CVE-2021-24336 2024-11-21 14:52 2021-06-7 Show GitHub Exploit DB Packet Storm
194732 8.8 HIGH
Network 		fortinet fortiai_firmware An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command. CWE-78
OS Command  		CVE-2021-24023 2024-11-21 14:52 2021-06-4 Show GitHub Exploit DB Packet Storm
194733 4.5 MEDIUM
Adjacent 		mcafee database_security Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted passwor… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-23896 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
194734 7.3 HIGH
Network 		fortinet fortios An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted… CWE-295
Improper Certificate Validation  		CVE-2021-24012 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
194735 8.0 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on th… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23895 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
194736 8.8 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on … CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23894 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
194737 6.1 MEDIUM
Network 		smartdatasoft car_repair_services_\&_auto_mechanic The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cros… - CVE-2021-24335 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194738 5.4 MEDIUM
Network 		connekthq instant_images_-_one_click_unsplash_uploads The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/up… - CVE-2021-24334 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194739 6.5 MEDIUM
Network 		content_copy_protection_\&_prevent_image_save_project content_copy_protection_\&_prevent_image_save The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24333 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194740 4.8 MEDIUM
Network 		smooth_scroll_page_up\/down_buttons_project smooth_scroll_page_up\/down_buttons The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client si… CWE-79
Cross-site Scripting 		CVE-2021-24331 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm