Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231101 5 警告 quickersite - QuickerSite における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6676 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
231102 2.1 注意 ZoneMinder - Gentoo Linux 上で稼動する ZoneMinder におけるデータベースユーザ名などを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6756 2012-12-20 19:10 2008-12-12 Show GitHub Exploit DB Packet Storm
231103 7.5 危険 SilverStripe - SilverStripe における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6753 2012-12-20 19:10 2008-03-14 Show GitHub Exploit DB Packet Storm
231104 4.3 警告 quickersite - QuickerSite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6675 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
231105 5 警告 quickersite - QuickerSite の mailPage.asp における電子メールアカウントをメッセージでフラッドされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6674 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
231106 7.5 危険 quickersite - QuickerSite の asp/bs_login.asp における admin パスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6673 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
231107 5 警告 vertex4 - Vertex4 SunAge におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2008-6672 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
231108 5 警告 vertex4 - Vertex4 SunAge におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2008-6671 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
231109 5 警告 vertex4 - Vertex4 SunAge における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-6670 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
231110 7.5 危険 yarck - SH-News の action.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6664 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196981 4.3 MEDIUM
Network 		theeventscalendar eventcalendar The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create e… - CVE-2021-25025 2024-11-21 14:54 2022-01-17 Show GitHub Exploit DB Packet Storm
196982 6.1 MEDIUM
Network 		theeventscalendar eventcalendar The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues - CVE-2021-25024 2024-11-21 14:54 2022-01-17 Show GitHub Exploit DB Packet Storm
196983 4.8 MEDIUM
Network 		seur_oficial_project seur_oficial The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html ca… CWE-79
Cross-site Scripting 		CVE-2021-25005 2024-11-21 14:54 2022-01-17 Show GitHub Exploit DB Packet Storm
196984 8.8 HIGH
Network 		wow-company wpcalc The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection vulnerability. - CVE-2021-25054 2024-11-21 14:54 2022-01-11 Show GitHub Exploit DB Packet Storm
196985 8.8 HIGH
Network 		wow-company wp_coder The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to… - CVE-2021-25053 2024-11-21 14:54 2022-01-11 Show GitHub Exploit DB Packet Storm
196986 8.8 HIGH
Network 		wow-company button_generator The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus le… - CVE-2021-25052 2024-11-21 14:54 2022-01-11 Show GitHub Exploit DB Packet Storm
196987 8.8 HIGH
Network 		wow-company modal_window The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leadin… CWE-352
 Origin Validation Error 		CVE-2021-25051 2024-11-21 14:54 2022-01-11 Show GitHub Exploit DB Packet Storm
196988 6.1 MEDIUM
Network 		10web 10websocial The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulnerability in the wdi_apply_changes admin page, allowing an attacker to perform su… - CVE-2021-25047 2024-11-21 14:54 2022-01-11 Show GitHub Exploit DB Packet Storm
196989 6.1 MEDIUM
Network 		pluginus woocommerce_currency_switcher The WOOCS WordPress plugin before 1.3.7.3 does not sanitise and escape the custom_prices parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue - CVE-2021-25043 2024-11-21 14:54 2022-01-11 Show GitHub Exploit DB Packet Storm
196990 9.8 CRITICAL
Network 		publishpress capabilities The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1 does not have authorisation and CSRF checks when updating the plugin's setting… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2021-25032 2024-11-21 14:54 2022-01-11 Show GitHub Exploit DB Packet Storm