Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231621 7.5 危険 wsnlinks - WSN Links の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6033 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
231622 7.5 危険 wsnlinks - WSN Links Free の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6032 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
231623 7.5 危険 wsnlinks - WSN Links の vote.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6031 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
231624 7.5 危険 university of queensland - University of Queensland Library Fez の list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6028 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
231625 7.5 危険 xnova - Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6023 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
231626 7.5 危険 xnova - Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6022 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
231627 7.5 危険 rianxosencabos cms - Rianxosencabos CMS の scripts/links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6014 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
231628 7.5 危険 sg real estate portal - SG Real Estate Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6011 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
231629 5 警告 sg real estate portal - SG Real Estate Portal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6010 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
231630 7.5 危険 sg real estate portal - SG Real Estate Portal における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6009 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197611 6.5 MEDIUM
Network 		publishpress post_expirator The Post Expirator WordPress plugin before 2.6.0 does not have proper capability checks in place, which could allow users with a role as low as Contributor to schedule deletion of arbitrary posts. CWE-863
 Incorrect Authorization 		CVE-2021-24783 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197612 6.5 MEDIUM
Network 		fullworks redirect_404_error_page_to_homepage_or_custom_page_with_logs The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin before 1.7.9 does not check for CSRF when deleting logs, which could allow attacker to make a logged in admin delete … - CVE-2021-24767 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197613 6.5 MEDIUM
Network 		404_to_301_project 404_to_301 The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delet… - CVE-2021-24766 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197614 8.8 HIGH
Network 		wclovers frontend_manager_for_woocommerce_along_with_bookings_subscription_listings_compatible The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible WordPress plugin before 6.5.12, when used in combination with another WCFM - WooCommerce Multivendor p… CWE-89
SQL Injection 		CVE-2021-24835 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197615 9.8 CRITICAL
Network 		genetechsolutions pie_register The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a… - CVE-2021-24731 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197616 6.5 MEDIUM
Network 		loco_translate_project loco_translate The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated "translator" users b… - CVE-2021-24721 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197617 4.8 MEDIUM
Network 		print-o-matic_project print-o-matic The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attack… - CVE-2021-24710 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197618 4.8 MEDIUM
Network 		wp_all_export_project wp_all_export The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to per… - CVE-2021-24708 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197619 4.8 MEDIUM
Network 		qwizcards_project qwizcards The Qwizcards – online quizzes and flashcards WordPress plugin before 3.62 does not properly sanitize and escape some of its settings, allowing high privilege users to perform Cross-Site Scripting at… - CVE-2021-24706 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm
197620 4.8 MEDIUM
Network 		quiz_tool_lite_project quiz_tool_lite The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perfor… - CVE-2021-24701 2024-11-21 14:53 2021-11-9 Show GitHub Exploit DB Packet Storm