Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230591 4.3 警告 Xine - xine-lib におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3231 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230592 6.9 警告 swapoff - op におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3229 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230593 10 危険 phpBB - phpBB における脆弱性 CWE-noinfo
情報不足 		CVE-2008-3224 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230594 6.8 警告 PowerDNS - PowerDNS Recursor における DNS を偽装される脆弱性 CWE-189
数値処理の問題 		CVE-2008-3217 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
230595 7.8 危険 thekelleys - dnsmasq におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3214 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230596 7.5 危険 webcms - WebCMS Portal Edition の secciones/tablon/tablon.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3213 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230597 7.5 危険 scripteen - Scripteen Free Image Hosting Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3212 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230598 7.5 危険 scripteen - Scripteen Free Image Hosting Script における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-3211 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230599 5 警告 reSIProcate - repro で使用されている ReSIProcate におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3210 2012-12-20 18:52 2008-07-3 Show GitHub Exploit DB Packet Storm
230600 5 警告 simpledns - Simple DNS Plus におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3208 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196221 5.4 MEDIUM
Network 		jh_404_logger_project jh_404_logger The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the Wor… - CVE-2021-24176 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196222 9.8 CRITICAL
Network 		posimyth the_plus_addons_for_elementor The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any … CWE-287
Improper Authentication 		CVE-2021-24175 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196223 8.1 HIGH
Network 		database-backups_project database-backups The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plu… - CVE-2021-24174 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196224 6.1 MEDIUM
Network 		vm_backups_project vm_backups The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Sit… CWE-352
 Origin Validation Error 		CVE-2021-24173 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196225 4.3 MEDIUM
Network 		vm_backups_project vm_backups The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current . CWE-352
 Origin Validation Error 		CVE-2021-24172 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196226 9.8 CRITICAL
Network 		woocommerce upload_files The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass this and upload a file with a PHP extensi… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-24171 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196227 7.5 HIGH
Network 		cozmoslabs user_profile_picture The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the upload_files capability. … CWE-200
Information Exposure 		CVE-2021-24170 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196228 6.1 MEDIUM
Network 		algolplus advanced_order_export_for_woocommerce This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS. CWE-79
Cross-site Scripting 		CVE-2021-24169 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196229 5.4 MEDIUM
Network 		easy_contact_form_pro_project easy_contact_form_pro The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields (such as Email Subject, Email Recipient, etc) when creating or editing a form, leading to an authen… CWE-79
Cross-site Scripting 		CVE-2021-24168 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196230 7.5 HIGH
Network 		web-stat web-stat When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send an XMLHttpRequest request to https://wts2.one/ajax.htm?action=lookup_WP_account. CWE-200
Information Exposure 		CVE-2021-24167 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm