Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249271 9.3 危険 Liferay
Apache Software Foundation
- Liferay Portal CE の XSL Content portlet における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-1571 2012-03-27 18:43 2011-01-12 Show GitHub Exploit DB Packet Storm
249272 5 警告 douran - Douran Portal における Web ルート下の任意のファイルのソースコードを取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1569 2012-03-27 18:43 2011-04-5 Show GitHub Exploit DB Packet Storm
249273 9.3 危険 IBM - IBM solidDB の solid.exe における認証を回避する脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-1560 2012-03-27 18:43 2011-04-5 Show GitHub Exploit DB Packet Storm
249274 10 危険 IBM - IBM Web Interface for Content Management における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2011-1559 2012-03-27 18:43 2011-04-5 Show GitHub Exploit DB Packet Storm
249275 4.3 警告 IBM - IBM Web Interface for Content Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1558 2012-03-27 18:43 2011-04-5 Show GitHub Exploit DB Packet Storm
249276 7.5 危険 ICloudCenter - ICloudCenter ICJobSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1557 2012-03-27 18:43 2011-04-4 Show GitHub Exploit DB Packet Storm
249277 6.8 警告 Andy's PHP Knowledgebase Project - Aphpkb の plugins/pdfClasses/pdfgen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1556 2012-03-27 18:43 2011-04-4 Show GitHub Exploit DB Packet Storm
249278 6.8 警告 Andy's PHP Knowledgebase Project - Aphpkb のsa.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1555 2012-03-27 18:43 2011-03-16 Show GitHub Exploit DB Packet Storm
249279 4.3 警告 foolabs
T1lib
- Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2011-1554 2012-03-27 18:43 2011-03-31 Show GitHub Exploit DB Packet Storm
249280 4.3 警告 foolabs
T1lib
- Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1553 2012-03-27 18:43 2011-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315271 5.4 MEDIUM
Network
givewp givewp The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and deletion of data due to a missing capability check on the 'handle_request' function… CWE-862
 Missing Authorization
CVE-2024-5941 2024-08-27 03:14 2024-08-20 Show GitHub Exploit DB Packet Storm
315272 5.3 MEDIUM
Network
givewp givewp The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_request' function in all… CWE-862
 Missing Authorization
CVE-2024-5940 2024-08-27 03:14 2024-08-20 Show GitHub Exploit DB Packet Storm
315273 5.3 MEDIUM
Network
givewp givewp The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'setup_wizard' function in all version… CWE-862
 Missing Authorization
CVE-2024-5939 2024-08-27 03:12 2024-08-20 Show GitHub Exploit DB Packet Storm
315274 - - - An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing an Authority Key … - CVE-2024-45235 2024-08-27 02:35 2024-08-25 Show GitHub Exploit DB Packet Storm
315275 - - - A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulnerability enables an attacker to inject malicious JavaScript code into the templa… - CVE-2024-40111 2024-08-27 02:35 2024-08-24 Show GitHub Exploit DB Packet Storm
315276 - - - A host header injection vulnerability exists in the forgot password functionality of ArrowCMS version 1.0.0. By sending a specially crafted host header in the forgot password request, it is possible … - CVE-2024-42914 2024-08-27 02:35 2024-08-24 Show GitHub Exploit DB Packet Storm
315277 5.4 MEDIUM
Network
kjayvik bus_ticket_reservation_system Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php. NVD-CWE-Other
CVE-2024-42766 2024-08-27 02:35 2024-08-24 Show GitHub Exploit DB Packet Storm
315278 - - - SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.php imposes restrictions on edited files, attackers can still bypass these restri… - CVE-2024-42599 2024-08-27 02:35 2024-08-23 Show GitHub Exploit DB Packet Storm
315279 - - - A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute … - CVE-2024-42787 2024-08-27 01:35 2024-08-27 Show GitHub Exploit DB Packet Storm
315280 - - - An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing a bit string that… - CVE-2024-45238 2024-08-27 01:35 2024-08-25 Show GitHub Exploit DB Packet Storm