Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252391 4 警告 オラクル - OpenSSO Enterprise および Sun Java System Access Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0847 2011-05-16 11:38 2011-04-19 Show GitHub Exploit DB Packet Storm
252392 5 警告 オラクル - Oracle Sun Java System Access Manager Policy Agent における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0846 2011-05-16 11:37 2011-04-19 Show GitHub Exploit DB Packet Storm
252393 4.3 警告 オラクル - OpenSSO Enterprise および Sun Java System Access Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0844 2011-05-16 11:36 2011-04-19 Show GitHub Exploit DB Packet Storm
252394 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0843 2011-05-16 11:35 2011-04-19 Show GitHub Exploit DB Packet Storm
252395 7.8 危険 オラクル - Oracle Solaris 11 Express における TCP/IP の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0841 2011-05-16 11:34 2011-04-19 Show GitHub Exploit DB Packet Storm
252396 4 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0840 2011-05-16 11:33 2011-04-19 Show GitHub Exploit DB Packet Storm
252397 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Agile Technology Platform コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0837 2011-05-16 11:32 2011-04-19 Show GitHub Exploit DB Packet Storm
252398 3.5 注意 オラクル - Oracle JD Edwards EnterpriseOne Tools および OneWorld Tools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0836 2011-05-16 11:31 2011-04-19 Show GitHub Exploit DB Packet Storm
252399 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0834 2011-05-16 11:27 2011-04-19 Show GitHub Exploit DB Packet Storm
252400 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0833 2011-05-16 11:27 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224031 6.1 MEDIUM
Network 		codepeople cp_contact_form_with_paypal The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition. CWE-79
Cross-site Scripting 		CVE-2019-14784 2024-11-21 13:27 2019-08-16 Show GitHub Exploit DB Packet Storm
224032 5.3 MEDIUM
Network 		foliovision fv_flowplayer_video_player The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1… CWE-200
Information Exposure 		CVE-2019-14800 2024-11-21 13:27 2019-08-16 Show GitHub Exploit DB Packet Storm
224033 4.8 MEDIUM
Network 		toggle-the-title_project toggle-the-title The toggle-the-title (aka Toggle The Title) plugin 1.4 for WordPress has XSS via the wp-admin/admin-ajax.php?action=update_title_options isAutoSaveValveChecked or isDisableAllPagesValveChecked parame… CWE-79
Cross-site Scripting 		CVE-2019-14795 2024-11-21 13:27 2019-08-16 Show GitHub Exploit DB Packet Storm
224034 6.1 MEDIUM
Network 		limbcode limb-gallery The limb-gallery (aka Limb Gallery) plugin 1.4.0 for WordPress has XSS via the wp-admin/admin-ajax.php?action=grsGalleryAjax&grsAction=shortcode task parameter, CWE-79
Cross-site Scripting 		CVE-2019-14790 2024-11-21 13:27 2019-08-16 Show GitHub Exploit DB Packet Storm
224035 8.8 HIGH
Network 		leaftecnologia leaf_admin The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-14755 2024-11-21 13:27 2019-08-16 Show GitHub Exploit DB Packet Storm
224036 8.0 HIGH
Network 		dolibarr dolibarr_erp\/crm An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element (containing a user/card.php CSRF request) in his Linked Files settings page. When visited by the admin, this could… CWE-352
 Origin Validation Error 		CVE-2019-15062 2024-11-21 13:27 2019-08-15 Show GitHub Exploit DB Packet Storm
224037 9.1 CRITICAL
Network 		stb_project stb stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi__tga_load, leading to Information Disclosure or Denial of Service. CWE-125
Out-of-bounds Read 		CVE-2019-15058 2024-11-21 13:27 2019-08-15 Show GitHub Exploit DB Packet Storm
224038 9.8 CRITICAL
Network 		gradle gradle The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subs… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-15052 2024-11-21 13:27 2019-08-15 Show GitHub Exploit DB Packet Storm
224039 6.8 MEDIUM
Network 		atlassian html_include_and_replace_macro The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element. CWE-79
Cross-site Scripting 		CVE-2019-15053 2024-11-21 13:27 2019-08-15 Show GitHub Exploit DB Packet Storm
224040 8.8 HIGH
Network 		axiosys bento4 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_AvccAtom class at Core/Ap4AvccAtom.cpp. CWE-125
Out-of-bounds Read 		CVE-2019-15050 2024-11-21 13:27 2019-08-15 Show GitHub Exploit DB Packet Storm