Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250451 10 危険 ヒューレット・パッカード - HP Business Service Automation Essentials における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-2412 2011-09-27 11:28 2011-09-19 Show GitHub Exploit DB Packet Storm
250452 3.5 注意 シスコシステムズ - Cisco TelePresence System MXP の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2544 2011-09-27 11:24 2011-09-23 Show GitHub Exploit DB Packet Storm
250453 4.3 警告 MantisBT Group - MantisBT の bug_actiongroup_ext_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3578 2011-09-27 11:19 2011-08-31 Show GitHub Exploit DB Packet Storm
250454 4.3 警告 MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3358 2011-09-27 11:18 2011-09-21 Show GitHub Exploit DB Packet Storm
250455 6.8 警告 MantisBT Group - MantisBT の bug_actiongroup_ext_page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-3357 2011-09-27 11:17 2011-08-31 Show GitHub Exploit DB Packet Storm
250456 4.3 警告 MantisBT Group - MantisBT の filter_api.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2938 2011-09-27 11:15 2011-08-18 Show GitHub Exploit DB Packet Storm
250457 4.3 警告 MantisBT Group - MantisBT の config_defaults_inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3356 2011-09-27 11:12 2011-07-31 Show GitHub Exploit DB Packet Storm
250458 10 危険 シスコシステムズ - Cisco Identity Services Engine における設定を変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-3290 2011-09-27 11:07 2011-09-20 Show GitHub Exploit DB Packet Storm
250459 4.3 警告 Roundcube.net - Roundcube Webmail の UI メッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2937 2011-09-27 11:05 2011-08-9 Show GitHub Exploit DB Packet Storm
250460 6.8 警告 AmmSoft - AmmSoft ScriptFTP にバッファオーバーフローの脆弱性 - CVE-2011-3976 2011-09-27 10:58 2011-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
871 7.1 HIGH
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue affects User Regist… CWE-79
Cross-site Scripting
CVE-2026-42652 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
872 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from … CWE-862
 Missing Authorization
CVE-2026-42648 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
873 7.6 HIGH
Network
- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This issue affects TaxoPress: from n… CWE-89
SQL Injection
CVE-2026-42646 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
874 4.3 MEDIUM
Network
- - Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders al… CWE-352
 Origin Validation Error
CVE-2026-42645 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
875 5.3 MEDIUM
Network
- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: fr… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-42644 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
876 5.9 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image Widget: from n/a t… CWE-79
Cross-site Scripting
CVE-2026-42643 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
877 5.3 MEDIUM
Network
- - Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= 4.14.5. CWE-862
 Missing Authorization
CVE-2026-42642 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
878 5.4 MEDIUM
Network
- - Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request Forgery.This issue affects Share This Image: from n/a through <= 2.14. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42641 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
879 6.1 MEDIUM
Network
- - The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frontend_rewrite' function's 'WPMETEOR[N]WPMETEOR' placeholder content in all… CWE-79
Cross-site Scripting
CVE-2026-2902 2026-04-29 21:16 2026-04-29 Show GitHub Exploit DB Packet Storm
880 5.3 MEDIUM
Network
- - The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the REST API endpoint at /wp-json/co… CWE-862
 Missing Authorization
CVE-2026-4019 2026-04-29 18:16 2026-04-29 Show GitHub Exploit DB Packet Storm