Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254021 9.3 危険 マイクロソフト - Microsoft Windows における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-1991 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
254022 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2442 2011-10-20 16:14 2011-09-13 Show GitHub Exploit DB Packet Storm
254023 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の CoolType.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2441 2011-10-20 16:14 2011-09-13 Show GitHub Exploit DB Packet Storm
254024 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-2440 2011-10-20 16:13 2011-09-13 Show GitHub Exploit DB Packet Storm
254025 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-2439 2011-10-20 16:12 2011-09-13 Show GitHub Exploit DB Packet Storm
254026 - - BlueZ Project - BlueZ-hcidump におけるヒープオーバーフローの脆弱性 - CVE-2011-3334 2011-10-19 11:23 2011-10-13 Show GitHub Exploit DB Packet Storm
254027 - - VideoLAN - VLC Media Player に脆弱性 - CVE-2011-3333 2011-10-19 11:22 2011-10-13 Show GitHub Exploit DB Packet Storm
254028 6.4 警告 ヒューレット・パッカード - HP Onboard Administrator におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2011-3155 2011-10-19 11:20 2011-10-10 Show GitHub Exploit DB Packet Storm
254029 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-3241 2011-10-19 11:19 2011-10-12 Show GitHub Exploit DB Packet Storm
254030 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-3239 2011-10-19 11:19 2011-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194911 7.2 HIGH
Network
accesspressthemes wp_cookie_user_info The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin … - CVE-2021-24858 2024-11-21 14:53 2022-01-24 Show GitHub Exploit DB Packet Storm
194912 4.3 MEDIUM
Network
wp_post_page_clone_project wp_post_page_clone The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally. CWE-863
 Incorrect Authorization
CVE-2021-24733 2024-11-21 14:53 2022-01-24 Show GitHub Exploit DB Packet Storm
194913 8.8 HIGH
Network
tipsandtricks-hq simple_download_monitor The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins export logs to exploit a separate log di… - CVE-2021-24696 2024-11-21 14:53 2022-01-24 Show GitHub Exploit DB Packet Storm
194914 5.4 MEDIUM
Network
tipsandtricks-hq simple_download_monitor The Simple Download Monitor WordPress plugin before 3.9.11 could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attack via 1) "color" or "css_class" argument of … CWE-79
Cross-site Scripting
CVE-2021-24694 2024-11-21 14:53 2022-01-24 Show GitHub Exploit DB Packet Storm
194915 4.8 MEDIUM
Network
updraftplus updraftplus The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and lead… - CVE-2021-24423 2024-11-21 14:53 2022-01-24 Show GitHub Exploit DB Packet Storm
194916 6.1 MEDIUM
Network
navz acf_photo_gallery_field The ACF Photo Gallery Field WordPress plugin before 1.7.5 does not sanitise and escape the post parameter in the includes/acf_photo_gallery_metabox_edit.php file before outputing back in an attribute… - CVE-2021-24909 2024-11-21 14:53 2022-01-17 Show GitHub Exploit DB Packet Storm
194917 6.1 MEDIUM
Network
bologer anycomment The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Red… - CVE-2021-24838 2024-11-21 14:53 2022-01-17 Show GitHub Exploit DB Packet Storm
194918 7.2 HIGH
Network
metagauss registrationmagic The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could l… - CVE-2021-24862 2024-11-21 14:53 2022-01-11 Show GitHub Exploit DB Packet Storm
194919 7.5 HIGH
Network
stars_rating_project stars_rating The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the comments section, or pending comment das… CWE-20
 Improper Input Validation 
CVE-2021-24893 2024-11-21 14:53 2022-01-3 Show GitHub Exploit DB Packet Storm
194920 7.5 HIGH
Network
rich-web tab All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to modify various data in the plugin, such … CWE-425
 Direct Request ('Forced Browsing')
CVE-2021-24831 2024-11-21 14:53 2022-01-3 Show GitHub Exploit DB Packet Storm