Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249271 5 警告 grayscale - Grayscale BandSite CMS における重要な情報を取得される脆弱性 - CVE-2006-4986 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
249272 4.3 警告 grayscale - Grayscale BandSite CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-4985 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
249273 7.5 危険 grayscale - Grayscale BandSite CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4984 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
249274 7.5 危険 シスコシステムズ - Cisco NAC におけるコントロールメソッドを回避される脆弱性 - CVE-2006-4983 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
249275 4.6 警告 シスコシステムズ - Cisco NAC におけるローカルネットワークに接続される脆弱性 - CVE-2006-4982 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
249276 4.3 警告 DNN - Perpetual Motion Interactive Systems DotNetNuke の Default.aspx におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4973 2012-06-26 15:37 2006-09-17 Show GitHub Exploit DB Packet Storm
249277 7.5 危険 chumpsoft - phpQ の inc/ifunctions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4966 2012-06-26 15:37 2006-09-24 Show GitHub Exploit DB Packet Storm
249278 6.4 警告 Exponent CMS project - Exponent CMS の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4963 2012-06-26 15:37 2006-09-23 Show GitHub Exploit DB Packet Storm
249279 6.4 警告 blue dragon - Php Blue Dragon の pbd_engine.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4962 2012-06-26 15:37 2006-09-23 Show GitHub Exploit DB Packet Storm
249280 7.5 危険 blue dragon - Php Blue Dragon の GetModuleConfig 関数における SQL インジェクションの脆弱性 - CVE-2006-4961 2012-06-26 15:37 2006-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196221 8.8 HIGH
Network
wp-buy login_protection_-_limit_failed_login_attempts Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit Failed Login Attempts WordPress plugin before 2.9, to install any plugin (includ… NVD-CWE-Other
CVE-2021-24194 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196222 8.8 HIGH
Network
wp-buy visitor_traffic_real_time_statistics Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin (including a spe… NVD-CWE-Other
CVE-2021-24193 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196223 8.8 HIGH
Network
sitemap_project sitemap Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the W… NVD-CWE-Other
CVE-2021-24192 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196224 8.8 HIGH
Network
wpshopmart coming_soon_page_\&_maintenance_mode Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Maintenance Mode & Site Under Construction WordPress plugin before 1.8.2, to install any plugin (inclu… NVD-CWE-Other
CVE-2021-24191 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196225 8.8 HIGH
Network
wp-buy conditional_marketing_mailer Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install any plugin (including … NVD-CWE-Other
CVE-2021-24190 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196226 8.8 HIGH
Network
wp-buy captchinoo Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptcha for admin login page WordPress plugin before 2.4, to install any plugin (inc… NVD-CWE-noinfo
CVE-2021-24189 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196227 8.8 HIGH
Network
wp-buy wp_content_copy_protection_\&_no_right_click Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (includi… NVD-CWE-Other
CVE-2021-24188 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196228 9.8 CRITICAL
Network
mercedes-benz hermes An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp. CWE-787
 Out-of-bounds Write
CVE-2021-23910 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196229 9.8 CRITICAL
Network
mercedes-benz hermes An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution. CWE-787
 Out-of-bounds Write
CVE-2021-23909 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196230 9.8 CRITICAL
Network
mercedes-benz headunit_ntg6_mercedes-benz_user_experience An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leadin… CWE-843
Type Confusion
CVE-2021-23908 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm