Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253301 6.8 警告 アップル - Apple Safari におけるディレクトリトラバーサルの脆弱性 CWE-22
CWE-94
CVE-2011-3229 2011-10-25 16:34 2011-10-14 Show GitHub Exploit DB Packet Storm
253302 6.8 警告 アップル - Apple Mac OS X の Apple Type Services (ATS) における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3437 2011-10-25 16:33 2011-10-14 Show GitHub Exploit DB Packet Storm
253303 6.5 警告 アップル - Apple Mac OS の Open Directory におけるパスワード変更の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3436 2011-10-25 16:32 2011-10-14 Show GitHub Exploit DB Packet Storm
253304 10 危険 ヒューレット・パッカード - HP Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3156 2011-10-25 14:34 2011-10-18 Show GitHub Exploit DB Packet Storm
253305 4.3 警告 KENT-WEB - WEB FORUM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3984 2011-10-25 13:44 2011-10-11 Show GitHub Exploit DB Packet Storm
253306 2.6 注意 KENT-WEB - WEB FORUM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3983 2011-10-25 13:43 2011-10-11 Show GitHub Exploit DB Packet Storm
253307 5 警告 KENT-WEB - WEB FORUM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3383 2011-10-25 13:43 2011-10-11 Show GitHub Exploit DB Packet Storm
253308 6.8 警告 アップル - Apple Mac OS X の MediaKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-3217 2011-10-25 11:50 2011-10-14 Show GitHub Exploit DB Packet Storm
253309 2.1 注意 アップル - Apple Mac OS X の kernel におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3216 2011-10-25 11:49 2011-10-14 Show GitHub Exploit DB Packet Storm
253310 2.1 注意 アップル - Apple Mac OS X の kernel におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3215 2011-10-25 11:48 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311081 5.5 MEDIUM
Network 		- - The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scripting via poll settings in all versions up to, and including, 5.4.6 due to insu… CWE-79
Cross-site Scripting 		CVE-2024-9462 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311082 6.4 MEDIUM
Network 		- - The PriPre plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.11 due to insufficient input sanitization and output escapi… CWE-79
Cross-site Scripting 		CVE-2024-9454 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311083 6.4 MEDIUM
Network 		- - The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient inpu… CWE-79
Cross-site Scripting 		CVE-2024-10091 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311084 - - - An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, result… - CVE-2024-48228 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311085 - - - Werkzeug is a Web Server Gateway Interface web application library. On Python < 3.11 on Windows, os.path.isabs() does not catch UNC paths like //server/share. Werkzeug's safe_join() relies on this ch… CWE-22
Path Traversal 		CVE-2024-49766 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311086 - - - Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component. - CVE-2024-48654 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311087 - - - File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_class.php component. - CVE-2024-48581 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311088 - - - SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request. - CVE-2024-48580 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311089 - - - SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request. - CVE-2024-48579 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm
311090 - - - SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary code via a crafted script. - CVE-2024-48204 2024-10-28 22:58 2024-10-26 Show GitHub Exploit DB Packet Storm