Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248011 7.5 危険 easy-clanpage - Easy-Clanpage の inc/module/online.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1494 2012-06-26 16:02 2008-03-25 Show GitHub Exploit DB Packet Storm
248012 7.5 危険 cuteflow-bin - Cuteflow Bin の login.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1493 2012-06-26 16:02 2008-03-25 Show GitHub Exploit DB Packet Storm
248013 7.5 危険 coronamatrix - CoronaMatrix phpAddressBook におけるディレクトリトラバーサルの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1492 2012-06-26 16:02 2008-03-25 Show GitHub Exploit DB Packet Storm
248014 10 危険 ASUSTeK Computer Inc. - ASUS Remote Console の DPC Proxy サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1491 2012-06-26 16:02 2008-03-25 Show GitHub Exploit DB Packet Storm
248015 9.3 危険 aurigma
piczo		 - Piczo などで使用される ImageUploader4.ocx の特定の Aurigma ActiveX コントロールの~ におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1490 2012-06-26 16:02 2008-03-25 Show GitHub Exploit DB Packet Storm
248016 4.3 警告 cyberfrogs - cyberfrogs.net cfnetgs の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1479 2012-06-26 16:02 2008-03-24 Show GitHub Exploit DB Packet Storm
248017 5 警告 ari pikivirta - Home FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1478 2012-06-26 16:02 2008-03-24 Show GitHub Exploit DB Packet Storm
248018 9.3 危険 unicenter
CA Technologies		 - 複数の CA 製品に使用される ListCtrl ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1472 2012-06-26 16:02 2008-03-24 Show GitHub Exploit DB Packet Storm
248019 6.4 警告 gallarific - Gallarific Free Edition におけるオブジェクトを編集される脆弱性 CWE-287
不適切な認証 		CVE-2008-1469 2012-06-26 16:02 2008-03-24 Show GitHub Exploit DB Packet Storm
248020 9.3 危険 detodas
Mambo Foundation
Joomla!		 - Mambo および Joomla! 用の Detodas Restaurante コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1465 2012-06-26 16:02 2008-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197951 6.1 MEDIUM
Network 		themeboy sportspress The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue - CVE-2021-24578 2024-11-21 14:53 2021-12-21 Show GitHub Exploit DB Packet Storm
197952 4.8 MEDIUM
Network 		calderaforms caldera_forms The Caldera Forms WordPress plugin before 1.9.5 does not sanitise and escape the Form Name before outputting it in attributes, which could allow high privilege users to perform Cross-Site Scripting a… - CVE-2021-24896 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197953 6.5 MEDIUM
Network 		get_custom_field_values_project get_custom_field_values The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access a… - CVE-2021-24872 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197954 5.4 MEDIUM
Network 		get_custom_field_values_project get_custom_field_values The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-… - CVE-2021-24871 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197955 9.8 CRITICAL
Network 		stopbadbots block_and_stop_bad_bots The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before using it in a SQL state… CWE-89
SQL Injection 		CVE-2021-24863 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197956 7.2 HIGH
Network 		quotes_collection_project quotes_collection The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection - CVE-2021-24861 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197957 4.3 MEDIUM
Network 		user_meta_shortcodes_project user_meta_shortcodes The User Meta Shortcodes WordPress plugin through 0.5 registers a shortcode that allows any user with a role as low as contributor to access other users metadata by specifying the user login as a par… - CVE-2021-24859 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197958 9.8 CRITICAL
Network 		nocean totop_link The ToTop Link WordPress plugin through 1.7.1 passes base64 encoded user input to the unserialize() PHP function, which could lead to PHP Object injection if a plugin installed on the blog has a suit… - CVE-2021-24857 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197959 5.4 MEDIUM
Network 		display_post_metadata_project display_post_metadata The Display Post Metadata WordPress plugin before 1.5.0 adds a shortcode to print out custom fields, however their content is not sanitised or escaped which could allow users with a role as low as Co… - CVE-2021-24855 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm
197960 8.8 HIGH
Network 		frenify mediamatic The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authenticated user, does not sanitise the categoryID parameter before using it in a SQL … CWE-89
SQL Injection 		CVE-2021-24848 2024-11-21 14:53 2021-12-13 Show GitHub Exploit DB Packet Storm