Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252201 5.8 警告 FreeRADIUS - FreeRADIUS の ocsp_check 関数における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-2701 2012-03-27 18:43 2011-08-3 Show GitHub Exploit DB Packet Storm
252202 2.1 注意 Linux - Linux kernel の si4713_write_econtrol_string 関数におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2700 2012-03-27 18:43 2011-09-6 Show GitHub Exploit DB Packet Storm
252203 4.3 警告 Wireshark - Wireshark の elem_cell_id_aux 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-2698 2012-03-27 18:43 2011-07-18 Show GitHub Exploit DB Packet Storm
252204 4.9 警告 Linux - Linux kernel の ext4 サブシステムにおけるサービス運用妨害 (DoS) 脆弱性 CWE-189
数値処理の問題 		CVE-2011-2695 2012-03-27 18:43 2011-07-28 Show GitHub Exploit DB Packet Storm
252205 7.5 危険 jan wolter - Apache HTTP Server の mod_authnz_external モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2688 2012-03-27 18:43 2011-07-28 Show GitHub Exploit DB Packet Storm
252206 7.5 危険 Drupal - Drupal における node_access の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2687 2012-03-27 18:43 2011-06-30 Show GitHub Exploit DB Packet Storm
252207 5 警告 Ruby-lang.org - Ruby における乱数の値を推測される脆弱性 CWE-310
暗号の問題 		CVE-2011-2686 2012-03-27 18:43 2011-08-5 Show GitHub Exploit DB Packet Storm
252208 9.3 危険 The Document Foundation - LibreOffice の Lotus Word Pro インポートフィルタにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2685 2012-03-27 18:43 2011-07-21 Show GitHub Exploit DB Packet Storm
252209 4 警告 IBM - IBM Rational DOORS Web Access の Login コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2682 2012-03-27 18:43 2011-05-5 Show GitHub Exploit DB Packet Storm
252210 10 危険 IBM - IBM Rational DOORS Web Access における詳細不明な脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2681 2012-03-27 18:43 2011-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319101 6.1 MEDIUM
Network 		redhat build_of_keycloak
keycloak 		An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and referrer_uri parameters are made to trick a user to visit a malicious webpage. … CWE-601
Open Redirect 		CVE-2024-7260 2024-10-1 23:15 2024-09-10 Show GitHub Exploit DB Packet Storm
319102 8.8 HIGH
Network 		advancedfilemanager advanced_file_manager The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.8. This makes it possible for a… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-8126 2024-10-1 23:14 2024-09-26 Show GitHub Exploit DB Packet Storm
319103 5.4 MEDIUM
Network 		alefypimentel gf_custom_style The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0 due to insufficient input sanitization and output … CWE-79
Cross-site Scripting 		CVE-2024-9173 2024-10-1 23:12 2024-09-26 Show GitHub Exploit DB Packet Storm
319104 5.4 MEDIUM
Network 		codecabin super_testimonials The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alignment’ parameter in all versions up to, and including, 3.0.0 due to insufficient input sanitizati… CWE-79
Cross-site Scripting 		CVE-2024-9127 2024-10-1 23:09 2024-09-26 Show GitHub Exploit DB Packet Storm
319105 5.4 MEDIUM
Network 		kingblack king_ie The king_IE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping… CWE-79
Cross-site Scripting 		CVE-2024-9125 2024-10-1 23:00 2024-09-26 Show GitHub Exploit DB Packet Storm
319106 5.4 MEDIUM
Network 		mapplic mapplic The Mapplic Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output esc… CWE-79
Cross-site Scripting 		CVE-2024-9117 2024-10-1 22:56 2024-09-26 Show GitHub Exploit DB Packet Storm
319107 5.4 MEDIUM
Network 		chetanvaghela common_tools_for_site The Common Tools for Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and… CWE-79
Cross-site Scripting 		CVE-2024-9115 2024-10-1 22:47 2024-09-26 Show GitHub Exploit DB Packet Storm
319108 6.1 MEDIUM
Network 		nitinmaurya wordpress_visitors The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value in versions up to, and including, 1.0 due to insufficient input sanitization a… CWE-79
Cross-site Scripting 		CVE-2022-4541 2024-10-1 22:46 2024-09-26 Show GitHub Exploit DB Packet Storm
319109 5.3 MEDIUM
Network 		codesupply sight The Sight – Professional Image Gallery and Portfolio plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handler_post_title' function in all ve… CWE-862
 Missing Authorization 		CVE-2024-9025 2024-10-1 22:44 2024-09-26 Show GitHub Exploit DB Packet Storm
319110 6.1 MEDIUM
Network 		bizswoop store_hours_for_woocommerce The Store Hours for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and… CWE-79
Cross-site Scripting 		CVE-2024-8872 2024-10-1 22:42 2024-09-26 Show GitHub Exploit DB Packet Storm