Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252261	4.3	警告	Beanbag	-	Review Board の commenting system におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4312	2011-11-25 16:03	2011-11-15	Show	GitHub Exploit DB Packet Storm

252262	3.2	注意	ヒューレット・パッカード	-	HP Operations Agent および Performance Agent におけるディレクトリアクセス制限を回避される脆弱性	CWE-noinfo 情報不足	CVE-2011-4160	2011-11-25 16:02	2011-11-22	Show	GitHub Exploit DB Packet Storm

252263	7.5	危険	Technicolor	-	Thomson TG585 上の UPnP IGD の実装における任意のポートマッピングを確立される脆弱性	CWE-16 環境設定	CVE-2011-4506	2011-11-25 14:33	2011-11-22	Show	GitHub Exploit DB Packet Storm

252264	7.5	危険	日本アルカテル・ルーセント	-	SpeedTouch 5x6 上の UPnP IGD の実装における任意のポートマッピングを確立される脆弱性	CWE-16 環境設定	CVE-2011-4505	2011-11-25 14:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

252265	7.5	危険	ZyXEL Genmei Mori	-	ZyXEL P-330W におけるポートマッピングによる通信を確立される脆弱性	CWE-16 環境設定	CVE-2011-4504	2011-11-25 14:31	2011-11-22	Show	GitHub Exploit DB Packet Storm

252266	7.5	危険	Sitecom Broadcom	-	Sitecom WL-111 上で動作する Broadcom Linux の UPnP IGD 実装におけるポートマッピングを確立される脆弱性	CWE-16 環境設定	CVE-2011-4503	2011-11-25 14:31	2011-11-22	Show	GitHub Exploit DB Packet Storm

252267	7.5	危険	Sitecom Canyon EDIMAX Technology Sweex	-	複数のルータ上で動作する Edimax EdiLinux の UPnP IGD 実装における任意のコマンドを実行される脆弱性	CWE-16 環境設定	CVE-2011-4502	2011-11-25 14:30	2011-11-22	Show	GitHub Exploit DB Packet Storm

252268	7.5	危険	Sitecom Canyon EDIMAX Technology Sweex	-	複数のルータ上で動作する Edimax EdiLinux の UPnP IGD 実装におけるポートマッピングを確立される脆弱性	CWE-16 環境設定	CVE-2011-4501	2011-11-25 14:29	2011-11-22	Show	GitHub Exploit DB Packet Storm

252269	7.5	危険	シスコシステムズ (Linksys) シスコシステムズ	-	Cisco Linksys WRT54GX の UPnP IGD 実装におけるファイアウォールを管理される脆弱性	CWE-16 環境設定	CVE-2011-4500	2011-11-25 14:28	2011-11-22	Show	GitHub Exploit DB Packet Storm

252270	7.5	危険	シスコシステムズ (Linksys) シスコシステムズ	-	Cisco Linksys WRT54G および WRT54GS の UPnP IGD 実装におけるポートマッピングを確立される脆弱性	CWE-16 環境設定	CVE-2011-4499	2011-11-25 14:18	2011-11-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311851	6.1	MEDIUM Network	themegrill	magazine_blocks	The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the us…	CWE-79 Cross-site Scripting	CVE-2024-9218	2024-10-9 00:33	2024-10-2	Show	GitHub Exploit DB Packet Storm

311852	5.4	MEDIUM Network	draytek	vigor3910_firmware vigor3912_firmware vigor2962_firmware vigor165_firmware vigor1000b_firmware vigor166_firmware vigor2135_firmware vigor2763_firmware vigor2765_firmware vi…	Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4.3.2.6.	CWE-79 Cross-site Scripting	CVE-2024-41587	2024-10-9 00:32	2024-10-4	Show	GitHub Exploit DB Packet Storm

311853	7.5	HIGH Network	draytek	vigor2620_firmware vigor2915_firmware vigor2866_firmware vigor2766_firmware vigor2865_firmware vigor2765_firmware vigor2763_firmware vigor2135_firmware vigor166_firmware vi…	An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG o…	CWE-326 Inadequate Encryption Strength	CVE-2024-41594	2024-10-9 00:31	2024-10-4	Show	GitHub Exploit DB Packet Storm

311854	5.5	MEDIUM Network	cisco	nexus_dashboard_fabric_controller	A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to pe…	CWE-88 Argument Injection	CVE-2024-20444	2024-10-9 00:26	2024-10-3	Show	GitHub Exploit DB Packet Storm

311855	8.6	HIGH Network	cisco	nexus_dashboard_fabric_controller	A vulnerability in the Cisco Nexus Dashboard Fabric Controller (NDFC) software, formerly Cisco Data Center Network Manager (DCNM), could allow an attacker with access to a backup file to view sensiti…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-20448	2024-10-9 00:25	2024-10-3	Show	GitHub Exploit DB Packet Storm

311856	8.6	HIGH Network	cisco	nexus_dashboard_orchestrator nexus_dashboard_insights nexus_dashboard_fabric_controller	A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2024-20490	2024-10-9 00:15	2024-10-3	Show	GitHub Exploit DB Packet Storm

311857	6.1	MEDIUM Network	berqier	berqwp	The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via t…	CWE-79 Cross-site Scripting	CVE-2024-9344	2024-10-9 00:06	2024-10-2	Show	GitHub Exploit DB Packet Storm

311858	8.8	HIGH Network	cisco	rv340_dual_wan_gigabit_vpn_router_firmware rv340w_dual_wan_gigabit_wireless-ac_vpn_router_firmware rv345_dual_wan_gigabit_vpn_router_firmware rv345p_dual_wan_gigabit_poe_vpn_router_firmware	A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate pr…	NVD-CWE-noinfo	CVE-2024-20393	2024-10-8 23:37	2024-10-3	Show	GitHub Exploit DB Packet Storm

311859	9.8	CRITICAL Network	codezips	online_shopping_portal	A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username …	CWE-89 SQL Injection	CVE-2024-9460	2024-10-8 23:33	2024-10-4	Show	GitHub Exploit DB Packet Storm

311860	5.4	MEDIUM Network	sulu	sulu	Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the “Media” section can upload an SVG file with a malicious payload. Once uploaded…	CWE-79 Cross-site Scripting	CVE-2024-47618	2024-10-8 23:31	2024-10-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed