Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249191 2.1 注意 w1.fi - hostapd における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2389 2012-06-25 16:49 2012-06-21 Show GitHub Exploit DB Packet Storm
249192 7.5 危険 The Document Foundation
OpenOffice.org Project		 - OpenOffice.org および LibreOffice の vclmi.dll モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-1149 2012-06-25 16:47 2012-05-16 Show GitHub Exploit DB Packet Storm
249193 6.2 警告 CITI - libgssapi および libgssglue における信頼されていない設定ファイルをロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2709 2012-06-25 16:38 2012-06-21 Show GitHub Exploit DB Packet Storm
249194 2.1 注意 Fabrice Bellard - Qemu の os-posix.c におけるホスト上の制限付きファイルにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2527 2012-06-25 16:37 2011-07-9 Show GitHub Exploit DB Packet Storm
249195 5.8 警告 KVM Group - qemu-kvm の virtio_queue_notify におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2512 2012-06-25 16:36 2012-06-21 Show GitHub Exploit DB Packet Storm
249196 5 警告 Linux - Linux Kernel の fs/proc/root.c におけるサービス運用妨害 (リファレンスリークおよびメモリ消費) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2127 2012-06-25 16:34 2012-06-21 Show GitHub Exploit DB Packet Storm
249197 6.4 警告 Linux - Linux Kernel の ROSE プロトコルの実装における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4914 2012-06-25 16:26 2012-06-21 Show GitHub Exploit DB Packet Storm
249198 7.8 危険 Linux - Linux Kernel の rose_parse_ccitt 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4913 2012-06-25 16:24 2012-06-21 Show GitHub Exploit DB Packet Storm
249199 7.5 危険 Linux - Linux Kernel の rose_parse_national 関数におけるサービス運用妨害 (ヒープメモリ破損) の脆弱性 CWE-Other
その他 		CVE-2011-1493 2012-06-25 16:15 2012-06-21 Show GitHub Exploit DB Packet Storm
249200 4.7 警告 Linux - Linux Kernel の inotify サブシステムにおけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1479 2012-06-25 15:49 2012-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196311 5.4 MEDIUM
Network 		elementor website_builder In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php) accepts a ‘header_size’ parameter. Although the element control lists a fixed set of … CWE-79
Cross-site Scripting 		CVE-2021-24202 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196312 5.4 MEDIUM
Network 		elementor website_builder In the Elementor Website Builder WordPress plugin before 3.1.4, the column element (includes/elements/column.php) accepts an ‘html_tag’ parameter. Although the element control lists a fixed set of po… CWE-79
Cross-site Scripting 		CVE-2021-24201 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196313 6.5 MEDIUM
Network 		themeum tutor_lms The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploite… CWE-89
SQL Injection 		CVE-2021-24185 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196314 8.8 HIGH
Network 		themeum tutor_lms Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privile… - CVE-2021-24184 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196315 6.5 MEDIUM
Network 		themeum tutor_lms The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be … CWE-89
SQL Injection 		CVE-2021-24183 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196316 6.5 MEDIUM
Network 		themeum tutor_lms The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that cou… CWE-89
SQL Injection 		CVE-2021-24182 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196317 6.5 MEDIUM
Network 		themeum tutor_lms The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could b… CWE-89
SQL Injection 		CVE-2021-24181 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196318 5.4 MEDIUM
Network 		never5 related_posts Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter w… CWE-79
Cross-site Scripting 		CVE-2021-24180 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196319 5.4 MEDIUM
Network 		webdesi9 file_manager In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manager_properties when a payload is submitted… CWE-79
Cross-site Scripting 		CVE-2021-24177 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm
196320 5.4 MEDIUM
Network 		jh_404_logger_project jh_404_logger The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the Wor… - CVE-2021-24176 2024-11-21 14:52 2021-04-6 Show GitHub Exploit DB Packet Storm