Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241541	7.5	危険	brian wilson	-	ol'bookmarks manager の frame.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6407	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

241542	4.3	警告	datalifecms	-	DLE の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6406	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

241543	7.5	危険	greatclone	-	Hotscripts Clone の showcategory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6405	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

241544	4.3	警告	extrosoft	-	eXtrovert Software Thyme の add_calendars.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6404	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

241545	4.4	警告	alcovebook	-	AlcoveBook sgml2x の rlatex における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-6397	2012-06-26 16:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

241546	4.3	警告	celerondude	-	Celerondude Uploader の account.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6396	2012-06-26 16:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

241547	7.8	危険	3com	-	3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point の Web 管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2008-6395	2012-06-26 16:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

241548	7.5	危険	CS-Cart	-	CS-Cart の core/user.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6394	2012-06-26 16:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

241549	7.5	危険	1scripts	-	Z1Exchange の showads.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6392	2012-06-26 16:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

241550	7.5	危険	aliensoftcorp	-	Rae Media Contact Management Software SOHO の asadmin/default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6389	2012-06-26 16:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267201	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads lattice	The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2…	CWE-79 Cross-site Scripting	CVE-2015-9533	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267202	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads digital_store	The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x be…	CWE-79 Cross-site Scripting	CVE-2015-9532	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267203	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads wish_lists	The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x b…	CWE-79 Cross-site Scripting	CVE-2015-9531	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267204	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads upload_file	The Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x …	CWE-79 Cross-site Scripting	CVE-2015-9530	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267205	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads stripe	The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x befor…	CWE-79 Cross-site Scripting	CVE-2015-9529	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267206	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads software_licensing	The Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and…	CWE-79 Cross-site Scripting	CVE-2015-9528	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267207	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads simple_shipping	The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.…	CWE-79 Cross-site Scripting	CVE-2015-9527	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267208	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads reviews	The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x befo…	CWE-79 Cross-site Scripting	CVE-2015-9526	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267209	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads recurring_payments	The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and…	CWE-79 Cross-site Scripting	CVE-2015-9525	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267210	6.1	MEDIUM Network	artificial_intelligence_project	artificial_intelligence	The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.	CWE-79 Cross-site Scripting	CVE-2015-9501	2024-11-21 11:40	2019-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed