Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226341 5 警告 Eucalyptus Systems - Eucalyptus におけるスナップショットを削除またはアップロードされる脆弱性 CWE-287
不適切な認証
CVE-2012-4066 2013-03-19 17:06 2013-02-28 Show GitHub Exploit DB Packet Storm
226342 6.8 警告 アップル - Apple Mac OS X のソフトウェアアップデートにおけるプラグインコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-0973 2013-03-19 16:57 2013-03-15 Show GitHub Exploit DB Packet Storm
226343 6.8 警告 アップル - Apple Mac OS X の PDFKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2013-0971 2013-03-19 16:55 2013-03-15 Show GitHub Exploit DB Packet Storm
226344 4.3 警告 アップル - Apple Mac OS X のメッセージにおける FaceTime のコール確認画面を回避される脆弱性 CWE-noinfo
情報不足
CVE-2013-0970 2013-03-19 16:54 2013-03-15 Show GitHub Exploit DB Packet Storm
226345 4.9 警告 アップル - Apple Mac OS X のログイン画面における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0969 2013-03-19 16:53 2013-03-15 Show GitHub Exploit DB Packet Storm
226346 4.3 警告 アップル - Apple Mac OS X の CoreTypes における Java プラグインの無効設定を回避される脆弱性 CWE-noinfo
情報不足
CVE-2013-0967 2013-03-19 16:49 2013-03-15 Show GitHub Exploit DB Packet Storm
226347 6.4 警告 アップル - Apple Mac OS X におけるディレクトリ認証要求を回避される脆弱性 CWE-noinfo
情報不足
CVE-2013-0966 2013-03-19 16:47 2013-03-15 Show GitHub Exploit DB Packet Storm
226348 7.5 危険 マイクロソフト - Windows 8 の Microsoft Internet Explorer 10 におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-noinfo
情報不足
CVE-2013-2552 2013-03-19 10:42 2013-03-11 Show GitHub Exploit DB Packet Storm
226349 7.2 危険 マイクロソフト - Microsoft Windows 7 のカーネルにおける権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-2553 2013-03-19 10:41 2013-03-11 Show GitHub Exploit DB Packet Storm
226350 7.5 危険 マイクロソフト - Microsoft Windows 7 における ASLR および DEP 保護メカニズムを回避される脆弱性 CWE-noinfo
情報不足
CVE-2013-2554 2013-03-19 10:37 2013-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311991 7.2 HIGH
Network
- - The WP Post Author – Boost Your Blog's Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder plugin for WordPress is … CWE-89
SQL Injection
CVE-2024-8757 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311992 6.4 MEDIUM
Network
- - The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rescue_tab' shortcode in all versions up to, and including, 2.8 due to insufficient input san… CWE-79
Cross-site Scripting
CVE-2024-9696 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311993 6.4 MEDIUM
Network
- - The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the table cell content in all versions up to, and including, 2.4.2 due to insuffic… CWE-79
Cross-site Scripting
CVE-2024-9595 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311994 6.4 MEDIUM
Network
- - The Category Icon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output … CWE-79
Cross-site Scripting
CVE-2024-8915 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311995 5.3 MEDIUM
Network
- - The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to CSS Injection in all versions up to, and including, 3.13.6. This makes it possible for unauthenticated attackers to… CWE-94
Code Injection
CVE-2024-8760 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311996 4.3 MEDIUM
Network
- - The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited arbitrary file uploads due to a missing capability check on the wcoa_add_attachment AJAX action in ver… - CVE-2024-9756 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311997 6.4 MEDIUM
Network
- - The Social Sharing (by Danny) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dvk_social_sharing' shortcode in all versions up to, and including, 1.3.7 due to insu… CWE-79
Cross-site Scripting
CVE-2024-9704 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311998 9.8 CRITICAL
Network
- - The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. This makes it possible for unauthenticated at… CWE-22
Path Traversal
CVE-2024-9047 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
311999 4.3 MEDIUM
Network
- - The ImagePress – Image Gallery plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ip_delete_post' and 'ip_update_post_title' fu… CWE-862
 Missing Authorization
CVE-2024-9824 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm
312000 - - - The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on th… CWE-352
 Origin Validation Error
CVE-2024-9778 2024-10-15 21:57 2024-10-12 Show GitHub Exploit DB Packet Storm