Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249321	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi のファイルブラウザにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2651	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249322	4.3	警告	Novell marcus schafer	-	SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2650	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249323	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2649	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249324	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2648	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249325	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2647	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249326	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2646	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249327	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2645	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249328	4.3	警告	Novell marcus schafer	-	SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2644	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249329	6.8	警告	The phpMyAdmin Project	-	phpMyAdmin の sql.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2643	2012-03-27 18:43	2011-07-23	Show	GitHub Exploit DB Packet Storm

249330	2.6	注意	The phpMyAdmin Project	-	phpMyAdmin の table Print view 実装におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2642	2012-03-27 18:43	2011-07-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313121	6.5	MEDIUM Network	apexsoftcell	ld_geo ld_dp_back_office	This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by …	CWE-354 Improper Validation of Integrity Check Value	CVE-2024-47089	2024-09-27 04:09	2024-09-19	Show	GitHub Exploit DB Packet Storm

313122	5.3	MEDIUM Network	circutor	q-smt_firmware	An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it indicates whether or not the user is presen…	NVD-CWE-noinfo	CVE-2024-8891	2024-09-27 03:50	2024-09-18	Show	GitHub Exploit DB Packet Storm

313123	7.5	HIGH Network	coredns.io	coredns	An issue was discovered in CoreDNS through 1.10.1. There is a vulnerability in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing denial of service for normal r…	NVD-CWE-noinfo	CVE-2023-28452	2024-09-27 03:37	2024-09-19	Show	GitHub Exploit DB Packet Storm

313124	5.4	MEDIUM Network	muffingroup	betheme	The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 27.5.5 due to insufficient input sanitization and output escapi…	CWE-79 Cross-site Scripting	CVE-2024-5567	2024-09-27 03:27	2024-09-13	Show	GitHub Exploit DB Packet Storm

313125	8.8	HIGH Network	sirv	sirv	The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in al…	CWE-862 Missing Authorization	CVE-2024-8480	2024-09-27 03:13	2024-09-6	Show	GitHub Exploit DB Packet Storm

313126	8.8	HIGH Network	bitapps	file_manager	The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uplo…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-7770	2024-09-27 02:49	2024-09-10	Show	GitHub Exploit DB Packet Storm

313127	6.1	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to DOM-based Cross-site Scripting (XSS). Attackers may be able to abuse the UpdateOTRAck method to forge a message t…	CWE-79 Cross-site Scripting	CVE-2024-46934	2024-09-27 02:41	2024-09-25	Show	GitHub Exploit DB Packet Storm

313128	7.5	HIGH Network	rocket.chat	rocket.chat	Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to denial of service (DoS). Attackers who craft messages with specific characters may crash the workspace due to an …	NVD-CWE-noinfo	CVE-2024-46935	2024-09-27 02:39	2024-09-25	Show	GitHub Exploit DB Packet Storm

313129	5.4	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.	CWE-79 Cross-site Scripting	CVE-2024-47048	2024-09-27 02:12	2024-09-25	Show	GitHub Exploit DB Packet Storm

313130	6.1	MEDIUM Network	xplodedthemes	xt_ajax_add_to_cart_for_woocommerce	The XT Ajax Add To Cart for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up…	CWE-79 Cross-site Scripting	CVE-2024-8716	2024-09-27 02:03	2024-09-24	Show	GitHub Exploit DB Packet Storm