Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249241 10 危険 CA Technologies - 複数の CA 製品で使用される RPC インターフェースにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5172 2012-06-26 15:37 2007-01-11 Show GitHub Exploit DB Packet Storm
249242 7.5 危険 devellion - Devellion CubeCart における SQL インジェクションの脆弱性 - CVE-2006-5107 2012-06-26 15:37 2006-10-3 Show GitHub Exploit DB Packet Storm
249243 5.1 警告 FacileForms - Mambo および Joomla! 用の FacileForms におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5106 2012-06-26 15:37 2006-10-3 Show GitHub Exploit DB Packet Storm
249244 7.5 危険 forum one - SyntaxCMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5105 2012-06-26 15:37 2006-10-3 Show GitHub Exploit DB Packet Storm
249245 7.5 危険 bbsnew - bbsNew の admin/index2.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5103 2012-06-26 15:37 2006-10-3 Show GitHub Exploit DB Packet Storm
249246 7.5 危険 baumedia - Sebastian Baumann の include/editfunc.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5102 2012-06-26 15:37 2006-10-3 Show GitHub Exploit DB Packet Storm
249247 7.5 危険 comdev - Comdev CSV Importer の include.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5101 2012-06-26 15:37 2006-10-3 Show GitHub Exploit DB Packet Storm
249248 7.5 危険 Andreas Gohr - DokuWiki の lib/exec/fetch.php における任意のコマンドを実行される脆弱性 - CVE-2006-5099 2012-06-26 15:37 2006-09-29 Show GitHub Exploit DB Packet Storm
249249 5 警告 Andreas Gohr - DokuWiki の lib/exec/fetch.php におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5098 2012-06-26 15:37 2006-09-29 Show GitHub Exploit DB Packet Storm
249250 7.5 危険 Yegnold - A-Blog の navigation/menu.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5092 2012-06-26 15:37 2006-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196191 8.8 HIGH
Network 		handsome_testimonials_\&_reviews_project handsome_testimonials_\&_reviews The hndtst_action_instance_callback AJAX call of the Handsome Testimonials & Reviews WordPress plugin before 2.1.1, available to any authenticated users, does not sanitise, validate or escape the hnd… CWE-89
SQL Injection 		CVE-2021-24492 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196192 6.1 MEDIUM
Network 		pickplugins post_grid The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross… - CVE-2021-24488 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196193 7.2 HIGH
Network 		ays-pro secure_copy_content_protection_and_content_locking The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL state… - CVE-2021-24484 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196194 7.2 HIGH
Network 		ays-pro poll_maker The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL state… - CVE-2021-24483 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196195 4.8 MEDIUM
Network 		any_hostname_project any_hostname The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its "Allowed hosts" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS paylo… - CVE-2021-24481 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196196 4.8 MEDIUM
Network 		event_geek_project event_geek The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authenticated (admin+) stored Cross-Site Scriptin… - CVE-2021-24480 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196197 4.8 MEDIUM
Network 		drawblog_project drawblog The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue - CVE-2021-24479 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196198 5.4 MEDIUM
Network 		bookshelf_project bookshelf The Bookshelf WordPress plugin through 2.0.4 does not sanitise or escape its "Paypal email address" setting before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting i… CWE-79
Cross-site Scripting 		CVE-2021-24478 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196199 6.1 MEDIUM
Network 		migrate_users_project migrate_users The Migrate Users WordPress plugin through 1.0.1 does not sanitise or escape its Delimiter option before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin … - CVE-2021-24477 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm
196200 5.4 MEDIUM
Network 		steam_group_viewer_project steam_group_viewer The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scri… - CVE-2021-24476 2024-11-21 14:53 2021-08-2 Show GitHub Exploit DB Packet Storm