Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228941 9.3 危険 シマンテック - Symantec WinFax Pro の Symantec.FaxViewerControl.1 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2570 2012-12-20 19:10 2009-07-22 Show GitHub Exploit DB Packet Storm
228942 4.3 警告 verlihub-project - VHCP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2569 2012-12-20 19:10 2009-07-22 Show GitHub Exploit DB Packet Storm
228943 9.3 危険 sorinara - Sorinara SAP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2568 2012-12-20 19:10 2009-07-22 Show GitHub Exploit DB Packet Storm
228944 9.3 危険 tfm - TFM MMPlayer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2566 2012-12-20 19:10 2009-07-21 Show GitHub Exploit DB Packet Storm
228945 5 警告 Wireshark - Wireshark の sFlow 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2561 2012-12-20 19:10 2009-07-20 Show GitHub Exploit DB Packet Storm
228946 5 警告 Wireshark - Wireshark の IPMI 解析子におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2559 2012-12-20 19:10 2009-07-20 Show GitHub Exploit DB Packet Storm
228947 5 警告 The Tor Project - Tor におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2425 2012-12-20 19:10 2009-07-10 Show GitHub Exploit DB Packet Storm
228948 4.3 警告 レッドハット - Red Hat JBoss Enterprise Application Platform の Web Console におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2405 2012-12-20 19:10 2009-12-9 Show GitHub Exploit DB Packet Storm
228949 9.3 危険 shinji-chiba - SCMPX におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2403 2012-12-20 19:10 2009-07-9 Show GitHub Exploit DB Packet Storm
228950 7.5 危険 phpecho cms - PHPEcho CMS の forum モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2402 2012-12-20 19:10 2009-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194881 6.1 MEDIUM
Network 		properfraction profilepress The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.11's widget for tabbed login/register was not properly escaped and could b… - CVE-2021-24522 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194882 7.2 HIGH
Network 		wow-estore side_menu The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from the browser when building an SQL statement. Users with the administrator role … - CVE-2021-24521 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194883 8.8 HIGH
Network 		coderstimes out_of_stock_message_for_woocommerce The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor… - CVE-2021-24520 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194884 5.4 MEDIUM
Network 		a3rev page_view_count The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post m… - CVE-2021-24509 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194885 9.8 CRITICAL
Network 		brainstormforce astra The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (av… - CVE-2021-24507 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194886 5.4 MEDIUM
Network 		madeit forms The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (X… - CVE-2021-24505 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194887 4.8 MEDIUM
Network 		flippercode wp_google_map The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high privilege users, ev… - CVE-2021-24502 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194888 8.1 HIGH
Network 		amentotech workreap The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objec… - CVE-2021-24501 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194889 8.1 HIGH
Network 		amentotech workreap Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated. This allows an atta… CWE-352
 Origin Validation Error 		CVE-2021-24500 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm
194890 9.8 CRITICAL
Network 		amentotech workreap The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid use… - CVE-2021-24499 2024-11-21 14:53 2021-08-9 Show GitHub Exploit DB Packet Storm