Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255001 4.3 警告 株式会社ジェーン - Janetter におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1236 2012-03-19 12:02 2012-03-19 Show GitHub Exploit DB Packet Storm
255002 4.3 警告 株式会社ジェーン - Janetter における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2012-0328 2012-03-19 12:02 2012-03-19 Show GitHub Exploit DB Packet Storm
255003 9.3 危険 シスコシステムズ - Cisco ASA 5500 series デバイスとそのソフトウェアにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0358 2012-03-16 15:57 2012-03-14 Show GitHub Exploit DB Packet Storm
255004 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0356 2012-03-16 15:56 2012-03-14 Show GitHub Exploit DB Packet Storm
255005 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0355 2012-03-16 15:55 2012-03-14 Show GitHub Exploit DB Packet Storm
255006 7.1 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0354 2012-03-16 15:54 2012-03-14 Show GitHub Exploit DB Packet Storm
255007 7.1 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0353 2012-03-16 15:53 2012-03-14 Show GitHub Exploit DB Packet Storm
255008 4.3 警告 DELL EMC (旧 EMC Corporation) - EMC Documentum eRoom におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0404 2012-03-16 14:24 2012-03-15 Show GitHub Exploit DB Packet Storm
255009 7.5 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum eRoom におけるセッションを奪われる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0398 2012-03-16 14:24 2012-03-15 Show GitHub Exploit DB Packet Storm
255010 7.5 危険 Mozilla Foundation - Windows 7 32-bit プラットフォーム上で稼働する複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0454 2012-03-16 13:56 2012-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197901 8.8 HIGH
Network 		core_tweaks_wp_setup_project core_tweaks_wp_setup The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in… - CVE-2021-24803 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197902 4.3 MEDIUM
Network 		infornweb logo_showcase_with_slick_slider The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as … - CVE-2021-24730 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197903 8.8 HIGH
Network 		orange-form_project orange-form In the Orange Form WordPress plugin through 1.0, the process_bulk_action() function in "admin/orange-form-email.php" performs an unprepared SQL query with an unsanitized parameter ($id). Only admin c… - CVE-2021-24704 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197904 4.9 MEDIUM
Network 		wpeverest contact_form The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack CWE-22
Path Traversal 		CVE-2021-24689 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197905 4.3 MEDIUM
Network 		orange-form_project orange-form The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls, for example the or_delete_filed one which is available to both unauthenticated… CWE-352
 Origin Validation Error 		CVE-2021-24688 2024-11-21 14:53 2022-02-28 Show GitHub Exploit DB Packet Storm
197906 9.8 CRITICAL
Network 		accesspressthemes accessbuddy
accesspress_basic
accesspress_lite
accesspress_mag
accesspress_parallax
accesspress_ray
accesspress_root
accesspress_staple
accesspress_store
agency_lite
apl… 		Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are a… - CVE-2021-24867 2024-11-21 14:53 2022-02-21 Show GitHub Exploit DB Packet Storm
197907 4.8 MEDIUM
Network 		lenderd mortgage_calculators_wp The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform … - CVE-2021-24904 2024-11-21 14:53 2022-02-14 Show GitHub Exploit DB Packet Storm
197908 6.1 MEDIUM
Network 		brevo newsletter\
_smtp\
_email_marketing_and_subscribe 		The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in attributes, leading to… - CVE-2021-24874 2024-11-21 14:53 2022-02-14 Show GitHub Exploit DB Packet Storm
197909 5.4 MEDIUM
Network 		wpchill remove_footer_credit The Remove Footer Credit WordPress plugin before 1.0.6 does not have CSRF check in place when saving its settings, which could allow attacker to make logged in admins change them and lead to Stored X… - CVE-2021-24446 2024-11-21 14:53 2022-02-14 Show GitHub Exploit DB Packet Storm
197910 5.4 MEDIUM
Network 		supportcandy supportcandy The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Script… CWE-79
Cross-site Scripting 		CVE-2021-24880 2024-11-21 14:53 2022-02-8 Show GitHub Exploit DB Packet Storm