Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249371 5.1 警告 c-news.fr - C-News.fr C-News における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4639 2012-06-26 15:37 2006-09-8 Show GitHub Exploit DB Packet Storm
249372 5.1 警告 acgv news - ACGV News の article.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4638 2012-06-26 15:37 2006-09-8 Show GitHub Exploit DB Packet Storm
249373 5.1 警告 acgv news - ACGV News における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4637 2012-06-26 15:37 2006-09-8 Show GitHub Exploit DB Packet Storm
249374 7.5 危険 c-news.fr - C-News.fr C-News の affichage/commentaires.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4629 2012-06-26 15:37 2006-09-8 Show GitHub Exploit DB Packet Storm
249375 7.5 危険 AVAST Software s.r.o. - alwil avast! Anti-virus Engine におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4626 2012-06-26 15:37 2006-09-7 Show GitHub Exploit DB Packet Storm
249376 7.5 危険 comscripts - AnnonceV の annonce.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4622 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
249377 7.5 危険 bare concept media - Pheap の settings.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4621 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
249378 4.6 警告 Alt-N - MDaemon が稼動している Alt-N WebAdmin の useredit_account.wdm モジュールにおけるシステムのメールキューへのアクセス権を取得される脆弱性 - CVE-2006-4620 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
249379 4.6 警告 Avira - Avira AntiVir PersonalEdition Classic の更新スタートウィンドウにおける権限を取得される脆弱性 - CVE-2006-4619 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
249380 7.5 危険 dsocks - dsocks の dsocks.c の _tor_resolve 関数におけるバッファオーバーフローの脆弱性 - CVE-2006-4611 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196421 6.5 MEDIUM
Network 		querysol redirection_for_contact_form_7 In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug AJAX action to install any plugin from the WordPress reposit… - CVE-2021-24279 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196422 7.5 HIGH
Network 		querysol redirection_for_contact_form_7 In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function. - CVE-2021-24278 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196423 5.4 MEDIUM
Network 		wpuslugi rss_for_yandex_turbo The RSS for Yandex Turbo WordPress plugin before 1.30 did not properly sanitise the user inputs from its ???????? settings tab before outputting them back in the page, leading to authenticated stored… - CVE-2021-24277 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196424 8.8 HIGH
Network 		wp-buy login_as_user_or_customer_\(user_switching\) Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer (User Switching) WordPress plugin before 1.8, to install any plugin (including … NVD-CWE-Other
CVE-2021-24195 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196425 8.8 HIGH
Network 		wp-buy login_protection_-_limit_failed_login_attempts Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit Failed Login Attempts WordPress plugin before 2.9, to install any plugin (includ… NVD-CWE-Other
CVE-2021-24194 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196426 8.8 HIGH
Network 		wp-buy visitor_traffic_real_time_statistics Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin (including a spe… NVD-CWE-Other
CVE-2021-24193 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196427 8.8 HIGH
Network 		sitemap_project sitemap Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the W… NVD-CWE-Other
CVE-2021-24192 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196428 8.8 HIGH
Network 		wpshopmart coming_soon_page_\&_maintenance_mode Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Maintenance Mode & Site Under Construction WordPress plugin before 1.8.2, to install any plugin (inclu… NVD-CWE-Other
CVE-2021-24191 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196429 8.8 HIGH
Network 		wp-buy conditional_marketing_mailer Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install any plugin (including … NVD-CWE-Other
CVE-2021-24190 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
196430 8.8 HIGH
Network 		wp-buy captchinoo Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptcha for admin login page WordPress plugin before 2.4, to install any plugin (inc… NVD-CWE-noinfo
CVE-2021-24189 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm