Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250041 7.5 危険 atmail pty ltd - Atmail オープンソースの Atmail WebMail Client における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2012-1916 2012-03-29 16:17 2012-03-27 Show GitHub Exploit DB Packet Storm
250042 4.6 警告 Opera Software ASA - UNIX 上で稼働する Opera における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1931 2012-03-29 16:16 2012-03-28 Show GitHub Exploit DB Packet Storm
250043 4.6 警告 Opera Software ASA - UNIX 上で稼働する Opera における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1930 2012-03-29 16:15 2012-03-28 Show GitHub Exploit DB Packet Storm
250044 6.4 警告 Opera Software ASA - Opera におけるアドレスフィールドを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1928 2012-03-29 15:59 2012-03-27 Show GitHub Exploit DB Packet Storm
250045 5 警告 Opera Software ASA - Opera における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2012-1926 2012-03-29 15:56 2012-03-27 Show GitHub Exploit DB Packet Storm
250046 6.8 警告 Opera Software ASA - Opera における任意のファイルをダウンロードおよび実行させられる脆弱性 CWE-DesignError
CVE-2012-1925 2012-03-29 15:48 2012-03-28 Show GitHub Exploit DB Packet Storm
250047 6.8 警告 Opera Software ASA - Opera における任意のファイルをダウンロードおよび実行させられる脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1924 2012-03-29 15:47 2012-03-28 Show GitHub Exploit DB Packet Storm
250048 5 警告 PrivaWall - PrivaWall Antivirus のスキャナエンジンにおけるマルウェアの検出を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1907 2012-03-29 15:43 2012-03-28 Show GitHub Exploit DB Packet Storm
250049 6.4 警告 MaraDNS - MaraDNS における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1570 2012-03-29 15:25 2012-03-17 Show GitHub Exploit DB Packet Storm
250050 5.8 警告 ヒューレット・パッカード - HP-UX の WBEM 実装におけるアクセス権を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-0126 2012-03-29 14:32 2012-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195811 5.4 MEDIUM
Network 		wpmanageninja fluentsmtp The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SM… CWE-79
Cross-site Scripting 		CVE-2021-24528 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195812 6.1 MEDIUM
Network 		sharethis dashboard_for_google_analytics The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the p… CWE-79
Cross-site Scripting 		CVE-2021-24438 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195813 6.1 MEDIUM
Network 		realfavicongenerator favicon_by_realfavicongenerator The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scrip… - CVE-2021-24437 2024-11-21 14:53 2021-08-31 Show GitHub Exploit DB Packet Storm
195814 4.8 MEDIUM
Network 		erident_custom_login_and_dashboard_project erident_custom_login_and_dashboard The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is… CWE-79
Cross-site Scripting 		CVE-2021-24658 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195815 8.8 HIGH
Network 		hmplugin hm_multiple_roles The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2021-24602 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195816 4.8 MEDIUM
Network 		simple_banner_project simple_banner The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfilt… CWE-79
Cross-site Scripting 		CVE-2021-24574 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195817 5.4 MEDIUM
Network 		harmonicdesign hd_quiz The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues CWE-79
Cross-site Scripting 		CVE-2021-24571 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195818 8.8 HIGH
Network 		contact_form_7_captcha_project contact_form_7_captcha The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24565 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195819 5.4 MEDIUM
Network 		wpfront scroll_top The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting i… CWE-79
Cross-site Scripting 		CVE-2021-24564 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195820 7.5 HIGH
Network 		lifterlms lifterlms The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers a… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2021-24562 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm