Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249041 7.5 危険 aspcode.net - PollMentor の admin_poll.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0984 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
249042 6.8 警告 ansatheus - AT Contenator の _admin/nav.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0983 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
249043 10 危険 activex soft - ActSoft DVD-Tools ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-0976 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
249044 5 警告 apache stats - Ian Bezanson Apache Stats における重要な変数を上書きされる脆弱性 - CVE-2007-0975 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
249045 9 危険 シスコシステムズ - Cisco FWSM における特定の ACL 保護を回避される脆弱性 - CVE-2007-0968 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
249046 7.8 危険 シスコシステムズ - Cisco FWSM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0967 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
249047 7.8 危険 シスコシステムズ - Cisco FWSM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0966 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
249048 7.8 危険 シスコシステムズ - Cisco FWSM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0965 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
249049 5.4 警告 シスコシステムズ - Cisco FWSM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0964 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
249050 7.8 危険 シスコシステムズ - Cisco FWSM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0963 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196301 4.8 MEDIUM
Network 		statcounter statcounter The StatCounter WordPress plugin before 2.0.7 does not sanitise and escape the Project ID and Secure Code settings, which could allow high privilege users to perform Cross-Site Scripting attacks even… - CVE-2021-24920 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196302 4.3 MEDIUM
Network 		infornweb logo_showcase_with_slick_slider The Logo Showcase with Slick Slider WordPress plugin before 2.0.1 does not have CSRF check in the lswss_save_attachment_data AJAX action, allowing attackers to make a logged in high privilege user, c… - CVE-2021-24913 2024-11-21 14:54 2022-02-28 Show GitHub Exploit DB Packet Storm
196303 4.8 MEDIUM
Network 		anti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewall The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST data before outputting it back in attributes of an admin page, leading to a Re… - CVE-2021-25101 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
196304 6.1 MEDIUM
Network 		givewp givewp The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting - CVE-2021-25100 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
196305 6.1 MEDIUM
Network 		givewp givewp The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX a… - CVE-2021-25099 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
196306 8.8 HIGH
Network 		sygnoos popup_builder The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it in a require statement, leading to a Local File Inclusion issue. Furthermore, si… - CVE-2021-25082 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
196307 3.5 LOW
Network 		wpdevart duplicate_page_or_post The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any authorisation and has a flawed CSRF check in the wpdevart_duplicate_post_parametrs_save_in_db AJAX action, allowing any auth… - CVE-2021-25075 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
196308 8.8 HIGH
Network 		wpdownloadmanager download_manager The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before using it in a SQL statement, leading to a SQL injection, which can also be exploited … - CVE-2021-25069 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
196309 5.4 MEDIUM
Network 		fivestarplugins five_star_business_profile_and_schema The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX a… - CVE-2021-25060 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
196310 5.4 MEDIUM
Network 		the_buffer_button_project the_buffer_button The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting (XSS) within the Twitter username to mention text field. - CVE-2021-25058 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm