Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248911 5 警告 blackdot - Imageview の fileview.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2425 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248912 7.5 危険 burak yilmaz - Burak Yilmaz Blog の bry.asp における SQL インジェクションの脆弱性 - CVE-2007-2420 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248913 10 危険 Cerulean Studios - Cerulean Studios Trillian Pro の XMPP コンポーネント におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2418 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
248914 7.5 危険 e-annu - E-Annu の home.php における SQL インジェクションの脆弱性 - CVE-2007-2416 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248915 4.3 警告 アップル - WebCore におけるクロスサイトスクリプティング攻撃を誘発する脆弱性 - CVE-2007-2410 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248916 4.3 警告 アップル - WebCore における重要な情報を取得される脆弱性 - CVE-2007-2409 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248917 6.8 警告 アップル - Apple Safari の WebKit における Java アプレットを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-2408 2012-06-26 15:46 2007-08-3 Show GitHub Exploit DB Packet Storm
248918 6.8 警告 アップル - Quartz Composer における任意のコードを実行される脆弱性 - CVE-2007-2406 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248919 6.8 警告 アップル - PDFKit の Preview における整数アンダーフローの脆弱性 - CVE-2007-2405 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248920 5 警告 アップル - CFNetwork における CRLF インジェクションの脆弱性 - CVE-2007-2404 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197191 6.5 MEDIUM
Network 		tipsandtricks-hq simple_download_monitor The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector. - CVE-2021-24692 2024-11-21 14:53 2022-03-15 Show GitHub Exploit DB Packet Storm
197192 5.4 MEDIUM
Network 		custom_content_shortcode_project custom_content_shortcode The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v < 4.0.1) or Admin+ (v < 4.0.2) users to perform Cros… CWE-79
Cross-site Scripting 		CVE-2021-24826 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197193 4.3 MEDIUM
Network 		custom_content_shortcode_project custom_content_shortcode The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ (v < 4.0.1) or Admin+ (v < 4.0.2) users to display a… - CVE-2021-24825 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197194 4.3 MEDIUM
Network 		custom_content_shortcode_project custom_content_shortcode The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor, to access arbitrary post metadata. This c… CWE-863
 Incorrect Authorization 		CVE-2021-24824 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197195 5.4 MEDIUM
Network 		nicdark cost_calculator The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator > Price S… CWE-79
Cross-site Scripting 		CVE-2021-24821 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197196 4.8 MEDIUM
Network 		wp-eventmanager wp_event_manager The WP Event Manager WordPress plugin before 3.1.23 does not escape some of its Field Editor settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even … CWE-79
Cross-site Scripting 		CVE-2021-24810 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197197 7.2 HIGH
Network 		wpaffiliatefeed tradetracker-store The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. CWE-89
SQL Injection 		CVE-2021-24778 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197198 7.2 HIGH
Network 		hotscot contact_form The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a… CWE-89
SQL Injection 		CVE-2021-24777 2024-11-21 14:53 2022-03-7 Show GitHub Exploit DB Packet Storm
197199 4.8 MEDIUM
Network 		codeasily grand_flagallery The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when… - CVE-2021-24903 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197200 4.8 MEDIUM
Network 		securemoz security_audit The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilt… - CVE-2021-24901 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm