Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253811	1.9	注意	NetSaro	-	NetSaro Enterprise Messenger Server における平文のサーバ資格情報を発見される脆弱性	CWE-310 暗号の問題	CVE-2011-3693	2011-10-4 10:25	2011-09-27	Show	GitHub Exploit DB Packet Storm

253812	1.9	注意	NetSaro	-	NetSaro Enterprise Messenger Server における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-3692	2011-10-4 10:06	2011-09-27	Show	GitHub Exploit DB Packet Storm

253813	6.9	警告	Foxit Software Inc	-	Foxit Reader における権限を取得される脆弱性	CWE-Other その他	CVE-2011-3691	2011-10-4 10:01	2011-09-27	Show	GitHub Exploit DB Packet Storm

253814	6.9	警告	PlotSoft L.L.C.	-	PlotSoft PDFill PDF Editor における権限を取得される脆弱性	CWE-Other その他	CVE-2011-3690	2011-10-4 10:00	2011-09-27	Show	GitHub Exploit DB Packet Storm

253815	7.5	危険	Sonexis Technology, Inc.	-	Sonexis ConferenceManager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-3688	2011-10-4 09:45	2011-09-27	Show	GitHub Exploit DB Packet Storm

253816	4.3	警告	Sonexis Technology, Inc.	-	Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3687	2011-10-3 14:56	2011-09-27	Show	GitHub Exploit DB Packet Storm

253817	4.3	警告	Sonexis Technology, Inc.	-	Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3686	2011-10-3 14:55	2011-09-27	Show	GitHub Exploit DB Packet Storm

253818	1.9	注意	Tembria	-	Tembria Server Monitor における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-3685	2011-10-3 14:54	2011-09-27	Show	GitHub Exploit DB Packet Storm

253819	4.3	警告	Tembria	-	Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3684	2011-10-3 14:52	2011-09-27	Show	GitHub Exploit DB Packet Storm

253820	7.5	危険	Newgen Software Technologies Limited	-	Newgen OmniDocs におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3645	2011-10-3 14:48	2011-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225551	8.8	HIGH Network	artica	pandora_fms	Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE…	CWE-863 Incorrect Authorization	CVE-2019-19681	2024-11-21 13:35	2019-12-27	Show	GitHub Exploit DB Packet Storm

225552	7.2	HIGH Network	halo	halo	Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-19999	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225553	7.5	HIGH Network	xiuno	xiunobbs	Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.	CWE-611 XXE	CVE-2019-19998	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225554	5.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.	CWE-862 Missing Authorization	CVE-2019-19985	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225555	6.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plugin settings and email campaigns.	CWE-863 Incorrect Authorization	CVE-2019-19984	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225556	4.3	MEDIUM Network	fastvelocity	minify	In the WordPress plugin, Fast Velocity Minify before 2.7.7, the full web root path to the running WordPress application can be discovered. In order to exploit this vulnerability, FVM Debug Mode needs…	CWE-200 Information Exposure	CVE-2019-19983	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225557	5.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send…	CWE-287 Improper Authentication	CVE-2019-19982	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225558	5.4	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for CSRF to be exploited on all plugin settings.	CWE-352 Origin Validation Error	CVE-2019-19981	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225559	4.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users (Subscriber or greater access) to send test emails from the administra…	NVD-CWE-noinfo	CVE-2019-19980	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225560	8.8	HIGH Network	wp_maintenance_project	wp_maintenance	A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with re…	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2019-19979	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed