Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
260301 6.8 警告 Opera Software ASA - Opera における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2059 2010-09-27 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
260302 9.3 危険 アドビシステムズ
Opera Software ASA		 - Opera における Adobe Acrobat の JavaScript の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1599 2010-09-27 16:09 2009-05-11 Show GitHub Exploit DB Packet Storm
260303 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7245 2010-09-27 16:09 2009-09-18 Show GitHub Exploit DB Packet Storm
260304 9.3 危険 Opera Software ASA - Windows 上で稼働する Opera におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5178 2010-09-27 16:09 2008-11-20 Show GitHub Exploit DB Packet Storm
260305 10 危険 Opera Software ASA - Opera における脆弱性 CWE-noinfo
情報不足 		CVE-2009-0916 2010-09-27 16:08 2009-03-3 Show GitHub Exploit DB Packet Storm
260306 4.3 警告 Opera Software ASA - Windows 上で稼働する Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5428 2010-09-27 16:07 2008-12-11 Show GitHub Exploit DB Packet Storm
260307 4.3 警告 Opera Software ASA - Opera の Opera.dll におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4725 2010-09-27 16:07 2008-10-23 Show GitHub Exploit DB Packet Storm
260308 5.8 警告 Opera Software ASA - Opera における新規フィードの購読を作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4698 2010-09-27 16:05 2008-10-23 Show GitHub Exploit DB Packet Storm
260309 10 危険 Opera Software ASA - Windows 上で稼働する Opera における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-4293 2010-09-27 16:05 2008-09-27 Show GitHub Exploit DB Packet Storm
260310 10 危険 Opera Software ASA - Opera における CRL の更新時の処理に関する脆弱性 CWE-255
CWE-noinfo
CVE-2008-4292 2010-09-27 16:04 2008-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200091 6.1 MEDIUM
Network 		givewp givewp The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting - CVE-2021-25100 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200092 6.1 MEDIUM
Network 		givewp givewp The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX a… - CVE-2021-25099 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200093 8.8 HIGH
Network 		sygnoos popup_builder The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it in a require statement, leading to a Local File Inclusion issue. Furthermore, si… - CVE-2021-25082 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200094 3.5 LOW
Network 		wpdevart duplicate_page_or_post The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any authorisation and has a flawed CSRF check in the wpdevart_duplicate_post_parametrs_save_in_db AJAX action, allowing any auth… - CVE-2021-25075 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200095 8.8 HIGH
Network 		wpdownloadmanager download_manager The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before using it in a SQL statement, leading to a SQL injection, which can also be exploited … - CVE-2021-25069 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200096 5.4 MEDIUM
Network 		fivestarplugins five_star_business_profile_and_schema The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX a… - CVE-2021-25060 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200097 5.4 MEDIUM
Network 		the_buffer_button_project the_buffer_button The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting (XSS) within the Twitter username to mention text field. - CVE-2021-25058 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200098 5.4 MEDIUM
Network 		translationexchange translation_exchange The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS) within the Project Key text field found in the plugin's settings. - CVE-2021-25057 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200099 6.1 MEDIUM
Network 		feedwordpress_project feedwordpress The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site Scripting (XSS) within the "visibility" parameter. CWE-79
Cross-site Scripting 		CVE-2021-25055 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm
200100 6.1 MEDIUM
Network 		sigmaplugin advanced_database_cleaner The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting iss… - CVE-2021-24921 2024-11-21 14:54 2022-02-21 Show GitHub Exploit DB Packet Storm