Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248911 5 警告 blackdot - Imageview の fileview.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2425 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248912 7.5 危険 burak yilmaz - Burak Yilmaz Blog の bry.asp における SQL インジェクションの脆弱性 - CVE-2007-2420 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248913 10 危険 Cerulean Studios - Cerulean Studios Trillian Pro の XMPP コンポーネント におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2418 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
248914 7.5 危険 e-annu - E-Annu の home.php における SQL インジェクションの脆弱性 - CVE-2007-2416 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248915 4.3 警告 アップル - WebCore におけるクロスサイトスクリプティング攻撃を誘発する脆弱性 - CVE-2007-2410 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248916 4.3 警告 アップル - WebCore における重要な情報を取得される脆弱性 - CVE-2007-2409 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248917 6.8 警告 アップル - Apple Safari の WebKit における Java アプレットを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-2408 2012-06-26 15:46 2007-08-3 Show GitHub Exploit DB Packet Storm
248918 6.8 警告 アップル - Quartz Composer における任意のコードを実行される脆弱性 - CVE-2007-2406 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248919 6.8 警告 アップル - PDFKit の Preview における整数アンダーフローの脆弱性 - CVE-2007-2405 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248920 5 警告 アップル - CFNetwork における CRLF インジェクションの脆弱性 - CVE-2007-2404 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196591 6.1 MEDIUM
Network 		geminilabs site_reviews The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenticated and any authenticated users), allo… CWE-79
Cross-site Scripting 		CVE-2021-24973 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
196592 6.1 MEDIUM
Network 		litespeedtech litespeed_cache The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specif… CWE-79
Cross-site Scripting 		CVE-2021-24964 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
196593 4.8 MEDIUM
Network 		litespeedtech litespeed_cache The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the JS code of an admin page, leading to a Reflected Cross-Site Scripting CWE-79
Cross-site Scripting 		CVE-2021-24963 2024-11-21 14:54 2022-01-3 Show GitHub Exploit DB Packet Storm
196594 7.5 HIGH
Network 		simple_jwt_login_project simple_jwt_login The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the str_shuffle PHP function … CWE-330
 Use of Insufficiently Random Values 		CVE-2021-24998 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
196595 6.5 MEDIUM
Network 		wp-guppy wp_guppy The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them and could lead to sensitive information disclosure, such as … - CVE-2021-24997 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
196596 4.8 MEDIUM
Network 		buttonizer buttonizer The Smart Floating / Sticky Buttons WordPress plugin before 2.5.5 does not sanitise and escape some parameter before outputting them in attributes and page, which could allow high privilege users to … - CVE-2021-24992 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
196597 5.4 MEDIUM
Network 		wprssaggregator wp_rss_aggregator The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprss… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2021-24988 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
196598 6.1 MEDIUM
Network 		wpfront wpfront_user_role_editor The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cros… - CVE-2021-24984 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
196599 6.1 MEDIUM
Network 		gwolle_guestbook_project gwolle_guestbook The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripti… - CVE-2021-24980 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm
196600 6.1 MEDIUM
Network 		strangerstudios paid_memberships_pro The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting - CVE-2021-24979 2024-11-21 14:54 2021-12-27 Show GitHub Exploit DB Packet Storm