Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254031 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2811 2011-10-19 11:15 2011-10-12 Show GitHub Exploit DB Packet Storm
254032 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2338 2011-10-19 11:14 2011-10-12 Show GitHub Exploit DB Packet Storm
254033 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-3244 2011-10-19 11:14 2011-10-12 Show GitHub Exploit DB Packet Storm
254034 9.3 危険 アップル - Apple iTunes で使用される CoreAudio におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3252 2011-10-19 11:13 2011-10-12 Show GitHub Exploit DB Packet Storm
254035 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の image-parsing ライブラリにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2438 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
254036 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2437 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
254037 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の image-parsing ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2436 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
254038 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2435 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
254039 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2434 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
254040 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2433 2011-10-18 16:26 2011-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194971 4.8 MEDIUM
Network
hu-manity cookie_notice_\&_compliance_for_gdpr_\/_ccpa The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high pri… - CVE-2021-24569 2024-11-21 14:53 2021-09-28 Show GitHub Exploit DB Packet Storm
194972 9.8 CRITICAL
Network
schiocco support_board_-_chat_and_help_desk The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before… - CVE-2021-24741 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194973 7.2 HIGH
Network
simple_schools_staff_directory_project simple_schools_staff_directory The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitr… - CVE-2021-24663 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194974 6.1 MEDIUM
Network
limit_login_attempts_project limit_login_attempts The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-For) of attempted logins before outputtin… - CVE-2021-24657 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194975 5.4 MEDIUM
Network
gutenslider gutenslider The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site… - CVE-2021-24640 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194976 8.1 HIGH
Network
ffw omgf The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary… - CVE-2021-24639 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194977 9.1 CRITICAL
Network
ffw omgf The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file … - CVE-2021-24638 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194978 5.4 MEDIUM
Network
fontsplugin fonts The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scrip… - CVE-2021-24637 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194979 8.1 HIGH
Network
print_my_blog_project print_my_blog The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved … - CVE-2021-24636 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm
194980 5.4 MEDIUM
Network
bootstrapped visual_link_preview The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated u… CWE-862
 Missing Authorization
CVE-2021-24635 2024-11-21 14:53 2021-09-20 Show GitHub Exploit DB Packet Storm