Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240531 4.3 警告 idevSpot - iDevSpot NixieAffiliate の forms/lostpassword.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4894 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240532 5 警告 マイクロソフト - Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4888 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240533 3.7 注意 マカフィー - McAfee VirusScan Enterprise などの製品におけるセキュリティ制限を回避される脆弱性 - CVE-2006-4886 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240534 4.3 警告 idevSpot - IDevSpot iSupport におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4884 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240535 4.3 警告 idevSpot - IDevSpot BizDirectory におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4883 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240536 7.5 危険 jupiter cms - Jupiter CMS における SQL インジェクションの脆弱性 - CVE-2006-4876 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240537 5 警告 jupiter cms - Jupiter CMS におけるピクチャファイルをアップロードされる脆弱性 - CVE-2006-4875 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240538 4.3 警告 jupiter cms - Jupiter CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4874 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240539 5 警告 jupiter cms - Jupiter CMS における重要な情報を取得される脆弱性 - CVE-2006-4873 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240540 7.5 危険 keyvan1 - Keyvan1 ECardPro の search.asp における SQL インジェクションの脆弱性 - CVE-2006-4872 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268771 8.8 HIGH
Network 		gowebsolutions wp_customer_reviews The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools. CWE-352
 Origin Validation Error 		CVE-2016-10902 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268772 6.1 MEDIUM
Network 		gowebsolutions wp_customer_reviews The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools. CWE-79
Cross-site Scripting 		CVE-2016-10901 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268773 6.1 MEDIUM
Network 		wpmanage uji_countdown The uji-countdown plugin before 2.0.7 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10900 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268774 5.3 MEDIUM
Network 		fabrix total_security The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability. CWE-20
 Improper Input Validation  		CVE-2016-10899 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268775 6.1 MEDIUM
Network 		fabrix total_security The total-security plugin before 3.4.1 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10898 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268776 6.1 MEDIUM
Network 		sermon_browser_project sermon_browser The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2016-10897 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268777 6.1 MEDIUM
Network 		clogica seo_redirection The seo-redirection plugin before 4.3 for WordPress has stored XSS. CWE-79
Cross-site Scripting 		CVE-2016-10896 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268778 6.1 MEDIUM
Network 		optiontree_project optiontree The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request. CWE-79
Cross-site Scripting 		CVE-2016-10895 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268779 6.1 MEDIUM
Network 		kibokolabs chained_quiz The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2016-10892 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm
268780 8.8 HIGH
Network 		supsystic popup The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF. CWE-352
 Origin Validation Error 		CVE-2016-10915 2024-11-21 11:45 2019-08-21 Show GitHub Exploit DB Packet Storm