Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250561 5 警告 マイクロソフト - Microsoft Windows Server 2003 および 2008 の DNS サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1970 2011-08-26 10:20 2011-08-9 Show GitHub Exploit DB Packet Storm
250562 10 危険 マイクロソフト - Microsoft Windows Server 2008 の DNS サーバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1966 2011-08-26 10:18 2011-08-9 Show GitHub Exploit DB Packet Storm
250563 4.3 警告 マイクロソフト - Microsoft Internet Explorer における Cookie を読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2383 2011-08-26 10:17 2011-08-9 Show GitHub Exploit DB Packet Storm
250564 9.3 危険 マイクロソフト - Microsoft Internet Explorer 7 から 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1963 2011-08-26 10:15 2011-08-9 Show GitHub Exploit DB Packet Storm
250565 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 9 におけるコンテンツを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-1962 2011-08-26 10:13 2011-08-9 Show GitHub Exploit DB Packet Storm
250566 4.3 警告 マイクロソフト - Microsoft .NET Framework における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-1978 2011-08-25 10:04 2011-08-9 Show GitHub Exploit DB Packet Storm
250567 4.7 警告 マイクロソフト - 複数の Microsoft Windows におけるサービス運用妨害 (リブート) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1971 2011-08-25 10:03 2011-08-9 Show GitHub Exploit DB Packet Storm
250568 4.3 警告 マイクロソフト - Microsoft Visual Studio および Report Viewer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1976 2011-08-25 10:00 2011-08-9 Show GitHub Exploit DB Packet Storm
250569 4.3 警告 マイクロソフト - Microsoft .NET Framework における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-1977 2011-08-25 09:54 2011-08-9 Show GitHub Exploit DB Packet Storm
250570 7.1 危険 マイクロソフト - Microsoft Windows の RDP 実装におけるサービス運用妨害 (リブート) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1968 2011-08-25 09:50 2011-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313301 - - - A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file checkout_ticket_save.… CWE-89
SQL Injection 		CVE-2024-7445 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm
313302 6.4 MEDIUM
Network 		- - The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ parameter in all versions up to, and including, 3.3.100 due to insufficient input sanit… - CVE-2024-7356 2024-08-5 21:41 2024-08-3 Show GitHub Exploit DB Packet Storm
313303 9.8 CRITICAL
Network 		- - The YayExtra – WooCommerce Extra Product Options plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_upload_file function in all versions up… - CVE-2024-7257 2024-08-5 21:41 2024-08-3 Show GitHub Exploit DB Packet Storm
313304 - - - The JetFormBuilder plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.4.1. This is due to improper restriction on user meta fields. This makes it pos… - CVE-2024-7291 2024-08-5 21:41 2024-08-3 Show GitHub Exploit DB Packet Storm
313305 - - - SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors. - CVE-2024-28297 2024-08-5 21:41 2024-08-3 Show GitHub Exploit DB Packet Storm
313306 - - - WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow code execution by utilizing the 'ELECTRON_RUN_AS_NODE' environment variable. Any… - CVE-2024-22169 2024-08-5 21:41 2024-08-3 Show GitHub Exploit DB Packet Storm
313307 - - - An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system … - CVE-2024-38885 2024-08-5 21:41 2024-08-3 Show GitHub Exploit DB Packet Storm
313308 - - - The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attac… - CVE-2024-6270 2024-08-5 15:16 2024-08-5 Show GitHub Exploit DB Packet Storm
313309 - - - The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored… - CVE-2024-5081 2024-08-5 15:16 2024-08-5 Show GitHub Exploit DB Packet Storm
313310 - - - A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argu… CWE-120
Classic Buffer Overflow 		CVE-2024-7465 2024-08-5 11:16 2024-08-5 Show GitHub Exploit DB Packet Storm