Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252341 10 危険 Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品におけるクローム特権で任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-2984 2011-09-7 11:35 2011-08-16 Show GitHub Exploit DB Packet Storm
252342 7.2 危険 Mozilla Foundation - Mozilla Firefox における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-2980 2011-09-7 11:34 2011-08-16 Show GitHub Exploit DB Packet Storm
252343 10 危険 Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品の appendChild 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-2378 2011-09-7 11:33 2011-08-16 Show GitHub Exploit DB Packet Storm
252344 9.3 危険 Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のイベント管理実装における同一生成元ポリシーを回避される脆弱性 CWE-16
環境設定 		CVE-2011-2981 2011-09-7 11:32 2011-08-16 Show GitHub Exploit DB Packet Storm
252345 10 危険 Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2982 2011-09-7 11:31 2011-08-16 Show GitHub Exploit DB Packet Storm
252346 5 警告 Mozilla Foundation - 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2011-2986 2011-09-6 10:54 2011-08-16 Show GitHub Exploit DB Packet Storm
252347 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の CSP violation reports 実装における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-2990 2011-09-6 10:53 2011-08-16 Show GitHub Exploit DB Packet Storm
252348 10 危険 Mozilla Foundation - 複数の Mozilla 製品の WebGL 実装で使用される ANGLE におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2987 2011-09-6 10:52 2011-08-16 Show GitHub Exploit DB Packet Storm
252349 10 危険 Mozilla Foundation - 複数の Mozilla 製品の WebGL shader 実装におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2988 2011-09-6 10:51 2011-08-16 Show GitHub Exploit DB Packet Storm
252350 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2993 2011-09-6 10:50 2011-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222101 6.3 MEDIUM
Network 		icegram email_subscribers_\&_newsletters The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plugin settings and email campaigns. CWE-863
 Incorrect Authorization 		CVE-2019-19984 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222102 4.3 MEDIUM
Network 		fastvelocity minify In the WordPress plugin, Fast Velocity Minify before 2.7.7, the full web root path to the running WordPress application can be discovered. In order to exploit this vulnerability, FVM Debug Mode needs… CWE-200
Information Exposure 		CVE-2019-19983 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222103 5.3 MEDIUM
Network 		icegram email_subscribers_\&_newsletters The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send… CWE-287
Improper Authentication 		CVE-2019-19982 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222104 5.4 MEDIUM
Network 		icegram email_subscribers_\&_newsletters The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for CSRF to be exploited on all plugin settings. CWE-352
 Origin Validation Error 		CVE-2019-19981 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222105 4.3 MEDIUM
Network 		icegram email_subscribers_\&_newsletters The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users (Subscriber or greater access) to send test emails from the administra… NVD-CWE-noinfo
CVE-2019-19980 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222106 8.8 HIGH
Network 		wp_maintenance_project wp_maintenance A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with re… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2019-19979 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222107 9.8 CRITICAL
Network 		libesmtp_project libesmtp libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. CWE-125
Out-of-bounds Read 		CVE-2019-19977 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222108 7.5 HIGH
Network 		upc connect_box_eurodocsis_firmware The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Passwor… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-19967 2024-11-21 13:35 2019-12-26 Show GitHub Exploit DB Packet Storm
222109 5.3 MEDIUM
Network 		wolfssl wolfssl An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled. DSA signing uses the BEEA algorithm during modular inversion of the nonce, leading to a side-chann… NVD-CWE-Other
CVE-2019-19963 2024-11-21 13:35 2019-12-25 Show GitHub Exploit DB Packet Storm
222110 7.5 HIGH
Network 		wolfssl wolfssl wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2019-19962 2024-11-21 13:35 2019-12-25 Show GitHub Exploit DB Packet Storm