Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251511 7.5 危険 Drupal - Drupal におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2006-5476 2012-06-26 15:37 2006-10-18 Show GitHub Exploit DB Packet Storm
251512 6.8 警告 Drupal - Drupal の XML パーサにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5475 2012-06-26 15:37 2006-10-18 Show GitHub Exploit DB Packet Storm
251513 2.1 注意 Avahi - Avahi における Avahi へのネットワーク変更を傍受される脆弱性 - CVE-2006-5461 2012-06-26 15:37 2006-11-14 Show GitHub Exploit DB Packet Storm
251514 7.5 危険 alex - Download-Engine における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5459 2012-06-26 15:37 2006-10-23 Show GitHub Exploit DB Packet Storm
251515 4.3 警告 casinosoft - Casinosoft Casino Script の登録フォームにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5457 2012-06-26 15:37 2006-10-23 Show GitHub Exploit DB Packet Storm
251516 4.3 警告 dev - DEV WMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5447 2012-06-26 15:37 2006-10-23 Show GitHub Exploit DB Packet Storm
251517 5.1 警告 casinosoft - Casinosoft Casino Script の lobby/config.php における SQL インジェクションの脆弱性 - CVE-2006-5446 2012-06-26 15:37 2006-10-23 Show GitHub Exploit DB Packet Storm
251518 7.8 危険 Digium - Asterisk の SIP チャネルドライバ (channels/chan_sip.c) におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5445 2012-06-26 15:37 2006-10-23 Show GitHub Exploit DB Packet Storm
251519 7.5 危険 Digium - Cisco SCCP 電話機で使用される Asterisk の Skinny チャネルドライバにおける整数オーバーフローの脆弱性 - CVE-2006-5444 2012-06-26 15:37 2006-10-23 Show GitHub Exploit DB Packet Storm
251520 7.5 危険 comdev - Comdev Web Blogger の adminfoot.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5441 2012-06-26 15:37 2006-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275231 7.8 HIGH
Local
dx_library_project dx_library Buffer overflow in the CL_vsprintf function in Takumi Yamada DX Library before 3.16 allows remote attackers to execute arbitrary code via a crafted string. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1131 2024-11-21 11:45 2016-01-8 Show GitHub Exploit DB Packet Storm
275232 6.1 MEDIUM
Network
pojo activity_log The aryo-activity-log plugin before 2.3.2 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10890 2024-11-21 11:44 2019-08-22 Show GitHub Exploit DB Packet Storm
275233 9.8 CRITICAL
Network
tipsandtricks-hq all_in_one_wp_security_\&_firewall The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues. CWE-89
SQL Injection
CVE-2016-10888 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
275234 9.8 CRITICAL
Network
tipsandtricks-hq all_in_one_wp_security_\&_firewall The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues. CWE-89
SQL Injection
CVE-2016-10887 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
275235 9.8 CRITICAL
Network
benjaminrojas wp_editor The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10886 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
275236 8.8 HIGH
Network
benjaminrojas wp_editor The wp-editor plugin before 1.2.6 for WordPress has CSRF. CWE-352
 Origin Validation Error
CVE-2016-10885 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
275237 8.8 HIGH
Network
simple-membership-plugin simple_membership The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. CWE-352
 Origin Validation Error
CVE-2016-10884 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
275238 6.5 MEDIUM
Network
mijnpress simple_add_pages_or_posts The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users. CWE-352
 Origin Validation Error
CVE-2016-10883 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
275239 8.8 HIGH
Network
google_doc_embedder_project google_doc_embedder The google-document-embedder plugin before 2.6.2 for WordPress has CSRF. CWE-352
 Origin Validation Error
CVE-2016-10882 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
275240 6.1 MEDIUM
Network
google_doc_embedder_project google_doc_embedder The google-document-embedder plugin before 2.6.2 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10881 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm