Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253661 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2447 2011-11-14 11:34 2011-11-8 Show GitHub Exploit DB Packet Storm
253662 10 危険 アドビシステムズ - Adobe Shockwave Player の DIRapi ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2446 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
253663 9.3 危険 マイクロソフト - Microsoft Windows の Windows Mail および Windows Meeting Space における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-2016 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
253664 9 危険 マイクロソフト - Microsoft Windows の LDAP over SSL 実装における証明書の制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-2014 2011-11-14 11:22 2011-11-8 Show GitHub Exploit DB Packet Storm
253665 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-2013 2011-11-14 11:21 2011-11-8 Show GitHub Exploit DB Packet Storm
253666 7.1 危険 マイクロソフト - Microsoft Windows の win32k.sys におけるにおけるサービス運用妨害 (リブート) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2004 2011-11-14 11:19 2011-11-8 Show GitHub Exploit DB Packet Storm
253667 6.8 警告 Stichting NLnet Labs - ldns の ldns_rr_new_frm_str_internal 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3581 2011-11-11 11:21 2011-08-24 Show GitHub Exploit DB Packet Storm
253668 5 警告 ヒューレット・パッカード - HP OpenVMS の SMTP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3169 2011-11-11 11:19 2011-11-3 Show GitHub Exploit DB Packet Storm
253669 5 警告 ヒューレット・パッカード - HP OpenVMS の POP および IMAP 実装における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3168 2011-11-11 11:18 2011-11-3 Show GitHub Exploit DB Packet Storm
253670 9.3 危険 Investintech.com Inc. - Investintech.com Absolute PDF Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-4223 2011-11-10 16:40 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195041 4.8 MEDIUM
Network 		erident_custom_login_and_dashboard_project erident_custom_login_and_dashboard The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is… CWE-79
Cross-site Scripting 		CVE-2021-24658 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195042 8.8 HIGH
Network 		hmplugin hm_multiple_roles The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2021-24602 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195043 4.8 MEDIUM
Network 		simple_banner_project simple_banner The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfilt… CWE-79
Cross-site Scripting 		CVE-2021-24574 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195044 5.4 MEDIUM
Network 		harmonicdesign hd_quiz The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues CWE-79
Cross-site Scripting 		CVE-2021-24571 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195045 8.8 HIGH
Network 		contact_form_7_captcha_project contact_form_7_captcha The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24565 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195046 5.4 MEDIUM
Network 		wpfront scroll_top The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting i… CWE-79
Cross-site Scripting 		CVE-2021-24564 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195047 7.5 HIGH
Network 		lifterlms lifterlms The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers a… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2021-24562 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195048 5.4 MEDIUM
Network 		veronalabs wp_sms The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue - CVE-2021-24561 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195049 5.4 MEDIUM
Network 		3.7designs project_status The pspin_duplicate_post_save_as_new_post function of the Project Status WordPress plugin through 1.6 does not sanitise, validate or escape the post GET parameter passed to it before outputting it in… CWE-79
Cross-site Scripting 		CVE-2021-24558 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm
195050 7.2 HIGH
Network 		nimble3 m-vslider The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users… - CVE-2021-24557 2024-11-21 14:53 2021-08-23 Show GitHub Exploit DB Packet Storm