Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226191	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2136	2013-03-26 16:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

226192	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2135	2013-03-26 16:41	2011-08-9	Show	GitHub Exploit DB Packet Storm

226193	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2134	2013-03-26 16:40	2011-08-9	Show	GitHub Exploit DB Packet Storm

226194	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2130	2013-03-26 16:39	2011-08-9	Show	GitHub Exploit DB Packet Storm

226195	5	警告	ヒューレット・パッカードアドビシステムズ日立	-	複数の Adobe 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2093	2013-03-26 16:38	2011-06-14	Show	GitHub Exploit DB Packet Storm

226196	4.3	警告	CloudBees	-	CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0328	2013-03-26 16:35	2013-02-16	Show	GitHub Exploit DB Packet Storm

226197	10	危険	ヒューレット・パッカードアドビシステムズ日立	-	複数の Adobe 製品における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2011-2092	2013-03-26 15:24	2011-06-14	Show	GitHub Exploit DB Packet Storm

226198	5	警告	サン・マイクロシステムズ日立ヒューレット・パッカード	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0872	2013-03-26 15:21	2011-06-7	Show	GitHub Exploit DB Packet Storm

226199	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0866	2013-03-26 15:12	2011-06-10	Show	GitHub Exploit DB Packet Storm

226200	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0864	2013-03-26 15:10	2011-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312391	9.8	CRITICAL Network	redefiningtheweb	affiliate_pro	The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1. This is due to the rtwwwap_login_request_callbac…	CWE-306 Missing Authentication for Critical Function	CVE-2024-9289	2024-10-8 03:25	2024-10-1	Show	GitHub Exploit DB Packet Storm

312392	7.4	HIGH Adjacent	cisco	ios_xr	A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause …	NVD-CWE-noinfo	CVE-2024-20406	2024-10-8 02:56	2024-09-12	Show	GitHub Exploit DB Packet Storm

312393	5.3	MEDIUM Network	cisco	ios_xr	A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on XML TCP listen port 38751. This vu…	NVD-CWE-Other	CVE-2024-20390	2024-10-8 02:51	2024-09-12	Show	GitHub Exploit DB Packet Storm

312394	7.2	HIGH Network	-	-	The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via deserialization of untrusted inp…	CWE-502 Deserialization of Untrusted Data	CVE-2024-9314	2024-10-8 02:48	2024-10-5	Show	GitHub Exploit DB Packet Storm

312395	6.5	MEDIUM Network	-	-	The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' f…	CWE-862 Missing Authorization	CVE-2024-9161	2024-10-8 02:48	2024-10-5	Show	GitHub Exploit DB Packet Storm

312396	6.4	MEDIUM Network	-	-	The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Modern Heading and Icon Picker widgets all versions …	-	CVE-2024-8486	2024-10-8 02:48	2024-10-5	Show	GitHub Exploit DB Packet Storm

312397	6.8	MEDIUM Network	-	-	The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 6.…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-8743	2024-10-8 02:48	2024-10-5	Show	GitHub Exploit DB Packet Storm

312398	4.9	MEDIUM Network	-	-	The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form label fields in all versions up to…	CWE-79 Cross-site Scripting	CVE-2024-9528	2024-10-8 02:48	2024-10-5	Show	GitHub Exploit DB Packet Storm

312399	6.4	MEDIUM Network	-	-	The WP Cleanup and Basic Functions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitiz…	CWE-79 Cross-site Scripting	CVE-2024-9455	2024-10-8 02:48	2024-10-5	Show	GitHub Exploit DB Packet Storm

312400	-		-	-	The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, …	CWE-79 Cross-site Scripting	CVE-2024-9385	2024-10-8 02:48	2024-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed