Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209781 5.4 警告 graphicstylus - Android 用 North American Ismaili Games アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6970 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209782 5.4 警告 blynk - Android 用 Deltin Suites アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6969 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209783 5.4 警告 mobileappsuite - Android 用 Grandma's Grotto アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6968 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209784 5.4 警告 vivonet - Android 用 Albion College アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6967 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209785 5.4 警告 parentlink - Android 用 West Bend School District アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6966 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209786 5.4 警告 faz - Android 用 FAZ.NET アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6965 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209787 5.4 警告 hyonga - Android 用 Hanyang University Admissions アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6964 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209788 5.4 警告 feiron - Android 用 feiron アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6963 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209789 5.4 警告 publicstuff - Android 用 Elk Grove PublicStuff アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6962 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209790 5.4 警告 sudaninet - Android 用 SudaniNet アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6961 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 27, 2026, 1:20 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307771 7.2 HIGH
Network 		presstigers simple_job_board The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-7351 2024-09-27 21:48 2024-08-24 Show GitHub Exploit DB Packet Storm
307772 7.2 HIGH
Network 		benjaminrojas wp_editor The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authen… CWE-502
 Deserialization of Untrusted Data 		CVE-2022-2446 2024-09-27 10:09 2024-09-14 Show GitHub Exploit DB Packet Storm
307773 5.4 MEDIUM
Network 		arnoldgoodway neighborly The Neighborly theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.4 due to insufficie… CWE-79
Cross-site Scripting 		CVE-2024-5869 2024-09-27 10:06 2024-09-14 Show GitHub Exploit DB Packet Storm
307774 5.4 MEDIUM
Network 		samiahmedsiddiqui custom_permalinks The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names… CWE-79
Cross-site Scripting 		CVE-2023-0926 2024-09-27 10:01 2024-08-24 Show GitHub Exploit DB Packet Storm
307775 5.4 MEDIUM
Network 		dfactory responsive_lightbox The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient input sanitization… CWE-79
Cross-site Scripting 		CVE-2024-6870 2024-09-27 09:52 2024-08-22 Show GitHub Exploit DB Packet Storm
307776 5.4 MEDIUM
Network 		posimyth the_plus_addons_for_elementor The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the carousel_direction para… CWE-79
Cross-site Scripting 		CVE-2024-5583 2024-09-27 09:47 2024-08-22 Show GitHub Exploit DB Packet Storm
307777 6.1 MEDIUM
Network 		instawp string_locator The String locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sql-column' parameter in all versions up to, and including, 2.6.5 due to insufficient input sanitizati… CWE-79
Cross-site Scripting 		CVE-2023-6987 2024-09-27 07:34 2024-08-24 Show GitHub Exploit DB Packet Storm
307778 5.4 MEDIUM
Network 		themeisle orbit_fox The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.10.36 due to insufficient input sanitization … CWE-79
Cross-site Scripting 		CVE-2024-7778 2024-09-27 07:22 2024-08-22 Show GitHub Exploit DB Packet Storm
307779 6.5 MEDIUM
Network 		mediajedi user_private_files The User Private Files – WordPress File Sharing Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.0 via the 'dpk_upvf_update_doc'… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-7848 2024-09-27 07:12 2024-08-22 Show GitHub Exploit DB Packet Storm
307780 5.3 MEDIUM
Network 		maxfoundry maxbuttons The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8. This makes it possible for unauthenticated attackers to … NVD-CWE-noinfo
CVE-2024-6499 2024-09-27 07:07 2024-08-24 Show GitHub Exploit DB Packet Storm