Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228681 7.5 危険 rentventory - Rentventory の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2339 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228682 6.8 警告 w3bcms - w3b|cms Gaestebuch Guestbook Module の includes/module/book/index.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2337 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
228683 5 警告 WordPress.org - WordPress および WordPress MU における有効なユーザ名を列挙される脆弱性 CWE-16
環境設定 		CVE-2009-2336 2012-12-20 19:10 2009-07-10 Show GitHub Exploit DB Packet Storm
228684 5 警告 WordPress.org - WordPress および WordPress MU における有効なユーザ名を列挙される脆弱性 CWE-16
環境設定 		CVE-2009-2335 2012-12-20 19:10 2009-07-10 Show GitHub Exploit DB Packet Storm
228685 4.9 警告 WordPress.org - WordPress および WordPress MU の wp-admin/admin.php における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-2334 2012-12-20 19:10 2009-07-9 Show GitHub Exploit DB Packet Storm
228686 2.1 注意 サン・マイクロシステムズ - Solaris 上の Sun Lightweight Availability Collection Tool における任意のファイルを上書きされる脆弱性 CWE-362
競合状態 		CVE-2009-2314 2012-12-20 19:10 2009-07-2 Show GitHub Exploit DB Packet Storm
228687 7.5 危険 selbstzweck - WBB3 用の rGallery プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2311 2012-12-20 19:10 2009-07-2 Show GitHub Exploit DB Packet Storm
228688 7.5 危険 punres - PunBB 用の Affiliation モジュールの affiliates.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2308 2012-12-20 19:10 2009-07-2 Show GitHub Exploit DB Packet Storm
228689 7.5 危険 tutorial-share - Optimum Web Design Tutorial Share における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2293 2012-12-20 19:10 2009-07-1 Show GitHub Exploit DB Packet Storm
228690 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2284 2012-12-20 19:10 2009-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194741 4.8 MEDIUM
Network 		cartflows cartflows The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privil… - CVE-2021-24330 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194742 5.4 MEDIUM
Network 		automattic wp_super_cache The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue. - CVE-2021-24329 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194743 6.2 MEDIUM
Network 		clogica wp_login_security_and_history The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any sanitisation or validation on them. This could allow attackers to make logged … CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24328 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194744 5.4 MEDIUM
Network 		deliciousbrains database_backup The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripti… - CVE-2021-24322 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194745 9.8 CRITICAL
Network 		bold-themes bello The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and b… - CVE-2021-24321 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194746 6.1 MEDIUM
Network 		bold-themes bello The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_di… - CVE-2021-24320 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194747 5.4 MEDIUM
Network 		bold-themes bello The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise its post_excerpt parameter before outputting it back in the shop/my-account/bello-listing-endpoint/ page, leadin… - CVE-2021-24319 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194748 6.5 MEDIUM
Network 		purethemes listeo The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user making the request, allowing any authenticated users to delete arbitrary page/post … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2021-24318 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194749 6.1 MEDIUM
Network 		purethemes listeo The Listeo WordPress theme before 1.6.11 did not properly sanitise some parameters in its Search, Booking Confirmation and Personal Message pages, leading to Cross-Site Scripting issues - CVE-2021-24317 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
194750 6.1 MEDIUM
Network 		wowthemes mediumish The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue. - CVE-2021-24316 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm