Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254491 6.8 警告 アップル
サイバートラスト株式会社
Ruby-lang.org
レッドハット		 - Ruby の BigDecimal クラス内にある VpMemAlloc 関数における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2011-0188 2011-07-28 10:08 2011-03-23 Show GitHub Exploit DB Packet Storm
254492 4.3 警告 アップル
サイバートラスト株式会社
Ruby-lang.org
レッドハット		 - Apple Mac OS X の Ruby WEBrick HTTP サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0541 2011-07-28 10:06 2010-06-15 Show GitHub Exploit DB Packet Storm
254493 5 警告 サイバートラスト株式会社
Ruby-lang.org
レッドハット		 - Ruby の WEBrick におけるウィンドウのタイトルを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4492 2011-07-28 10:04 2010-01-13 Show GitHub Exploit DB Packet Storm
254494 2.6 注意 Plone Foundation - Plone におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1340 2011-07-27 12:02 2011-07-27 Show GitHub Exploit DB Packet Storm
254495 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2626 2011-07-27 10:35 2011-06-28 Show GitHub Exploit DB Packet Storm
254496 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2625 2011-07-27 10:34 2011-06-28 Show GitHub Exploit DB Packet Storm
254497 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションハング) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2624 2011-07-27 10:34 2011-06-28 Show GitHub Exploit DB Packet Storm
254498 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションクラッシュおよびハング) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2623 2011-07-27 10:33 2011-06-28 Show GitHub Exploit DB Packet Storm
254499 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2622 2011-07-27 10:32 2011-06-28 Show GitHub Exploit DB Packet Storm
254500 7.2 危険 アップル - Apple iOS の IOMobileFrameBuffer における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0227 2011-07-27 10:31 2011-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310851 5.4 MEDIUM
Network 		- - The WP Log Viewer plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on several AJAX actions in all versions up to, and including, 1.2.1. This m… CWE-862
 Missing Authorization 		CVE-2024-11085 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310852 6.1 MEDIUM
Network 		- - The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL… CWE-79
Cross-site Scripting 		CVE-2024-10884 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310853 6.1 MEDIUM
Network 		- - The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the U… CWE-79
Cross-site Scripting 		CVE-2024-10883 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310854 6.1 MEDIUM
Network 		- - The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_Query_Arg without appropriate escaping on the URL in all versions up to, and includin… - CVE-2024-10875 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310855 4.3 MEDIUM
Network 		- - The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the ajax_install_plugin() function in all versions up to, and including, 3.… CWE-862
 Missing Authorization 		CVE-2024-10533 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310856 - - - The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and outpu… CWE-79
Cross-site Scripting 		CVE-2024-10147 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310857 6.4 MEDIUM
Network 		- - The PJW Mime Config plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output … CWE-79
Cross-site Scripting 		CVE-2024-10017 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310858 5.3 MEDIUM
Network 		- - The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivate_plugin… CWE-862
 Missing Authorization 		CVE-2024-10861 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310859 4.3 MEDIUM
Network 		- - The Popularis Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.7 via the 'elementor-template' shortcode due to insufficient restrictions on w… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10795 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
310860 4.3 MEDIUM
Network 		- - The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the sla_clear_user_cache function in all versions up to, and inclu… CWE-862
 Missing Authorization 		CVE-2024-10786 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm