Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254141 10 危険 Moxa Inc. - Moxa ActiveX SDK の特定の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4742 2012-03-27 18:42 2011-02-18 Show GitHub Exploit DB Packet Storm
254142 7.5 危険 aretimes
Joomla!
- Joomla! の Maian Media Silver (com_maianmedia) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4739 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
254143 7.5 危険 raemedia - Rae Media INC Real Estate Single and Multi Agent System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4738 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
254144 7.5 危険 hotwebscripts - HotWebScripts HotWeb Rentals の resorts.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4737 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
254145 7.5 危険 gatesoft - GateSoft DocuSafe の ECO.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4736 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
254146 7.5 危険 ecommercemax - Ecommercemax Solutions DGS の shoppingcart.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4735 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
254147 2.6 注意 amix - Skeletonz CMS 1.0 のコメント機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4734 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
254148 4.3 警告 LightNEasy - LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4753 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
254149 6.8 警告 LightNEasy - LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4752 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
254150 6 警告 LightNEasy - LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4751 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 6.4 MEDIUM
Network
- - The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Product SKU in all version… New CWE-79
Cross-site Scripting
CVE-2026-11783 2026-06-27 17:16 2026-06-27 Show GitHub Exploit DB Packet Storm
302 4.3 MEDIUM
Network
- - The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.1. This is due to the plugin not pr… New CWE-862
 Missing Authorization
CVE-2026-11773 2026-06-27 17:16 2026-06-27 Show GitHub Exploit DB Packet Storm
303 6.4 MEDIUM
Network
- - The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'infusionsoft-form' shortcode in versions up to, and including, 2.0.1. This is due to ins… New CWE-79
Cross-site Scripting
CVE-2026-11597 2026-06-27 17:16 2026-06-27 Show GitHub Exploit DB Packet Storm
304 4.3 MEDIUM
Network
- - The Product Specifications for WooCommerce plugin for WordPress is vulnerable to unauthorized modification, creation, and deletion of data in versions up to and including 0.8.9. This is due to a miss… New CWE-862
 Missing Authorization
CVE-2026-11364 2026-06-27 17:16 2026-06-27 Show GitHub Exploit DB Packet Storm
305 - - - The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariff_infourl setting before outputting it in the frontend HTML via the generateshariff() funct… New - CVE-2026-9677 2026-06-27 15:16 2026-06-27 Show GitHub Exploit DB Packet Storm
306 6.1 MEDIUM
Network
- - The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'view' parameter in all versions up to, and including, 9.8.5 due to insufficient input san… New CWE-79
Cross-site Scripting
CVE-2026-13245 2026-06-27 15:16 2026-06-27 Show GitHub Exploit DB Packet Storm
307 5.3 MEDIUM
Network
- - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.2.2. This is due to the plugin not properly veri… New CWE-862
 Missing Authorization
CVE-2026-12404 2026-06-27 15:16 2026-06-27 Show GitHub Exploit DB Packet Storm
308 - - - The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.16.17 does not verify that the user performing a subscription act… New - CVE-2026-10820 2026-06-27 15:16 2026-06-27 Show GitHub Exploit DB Packet Storm
309 7.5 HIGH
Network
- - A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. New CWE-121
Stack-based Buffer Overflow
CVE-2025-60474 2026-06-27 15:16 2026-06-25 Show GitHub Exploit DB Packet Storm
310 5.5 MEDIUM
Local
- - A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplyin… New CWE-476
 NULL Pointer Dereference
CVE-2025-60473 2026-06-27 15:16 2026-06-25 Show GitHub Exploit DB Packet Storm