Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 4:05 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255081 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0123 2011-03-30 15:26 2011-03-3 Show GitHub Exploit DB Packet Storm
255082 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0122 2011-03-30 15:24 2011-03-3 Show GitHub Exploit DB Packet Storm
255083 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0121 2011-03-30 15:20 2011-03-3 Show GitHub Exploit DB Packet Storm
255084 2.1 注意 BlackBerry - BlackBerry Desktop Software における暗号化されたファイルを復号化される脆弱性 CWE-119
バッファエラー
CVE-2010-2603 2011-03-30 14:12 2010-12-15 Show GitHub Exploit DB Packet Storm
255085 6.8 警告 BlackBerry - BlackBerry Enterprise Server の PDF Distiller コンポーネントにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2602 2011-03-30 14:09 2010-12-14 Show GitHub Exploit DB Packet Storm
255086 7.6 危険 BlackBerry - 複数の BlackBerry 製品の PDF Distiller におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2601 2011-03-30 14:00 2010-10-13 Show GitHub Exploit DB Packet Storm
255087 9.3 危険 アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0608 2011-03-30 13:36 2011-02-8 Show GitHub Exploit DB Packet Storm
255088 9.3 危険 アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0607 2011-03-30 13:35 2011-02-8 Show GitHub Exploit DB Packet Storm
255089 9.3 危険 アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0578 2011-03-30 13:34 2011-02-8 Show GitHub Exploit DB Packet Storm
255090 9.3 危険 アドビシステムズ
レッドハット
オラクル
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2011-0577 2011-03-30 13:33 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195121 9.8 CRITICAL
Network
cars-seller-auto-classifieds-script_project cars-seller-auto-classifieds-script The request_list_request AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate o… - CVE-2021-24285 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195122 9.8 CRITICAL
Network
kaswara_project kaswara The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/up… - CVE-2021-24284 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195123 5.4 MEDIUM
Network
pickplugins accordion The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue. - CVE-2021-24283 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195124 6.3 MEDIUM
Network
querysol redirection_for_contact_form_7 In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJAX actions in the plugin to do a variety of things. For exam… - CVE-2021-24282 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195125 4.3 MEDIUM
Network
querysol redirection_for_contact_form_7 In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the delete_action_post AJAX action to delete any post on a target site. - CVE-2021-24281 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195126 8.8 HIGH
Network
querysol redirection_for_contact_form_7 In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the import_from_debug AJAX action to inject PHP objects. CWE-502
 Deserialization of Untrusted Data
CVE-2021-24280 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195127 6.5 MEDIUM
Network
querysol redirection_for_contact_form_7 In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug AJAX action to install any plugin from the WordPress reposit… - CVE-2021-24279 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195128 7.5 HIGH
Network
querysol redirection_for_contact_form_7 In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function. - CVE-2021-24278 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195129 5.4 MEDIUM
Network
wpuslugi rss_for_yandex_turbo The RSS for Yandex Turbo WordPress plugin before 1.30 did not properly sanitise the user inputs from its ???????? settings tab before outputting them back in the page, leading to authenticated stored… - CVE-2021-24277 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm
195130 8.8 HIGH
Network
wp-buy login_as_user_or_customer_\(user_switching\) Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer (User Switching) WordPress plugin before 1.8, to install any plugin (including … NVD-CWE-Other
CVE-2021-24195 2024-11-21 14:52 2021-05-14 Show GitHub Exploit DB Packet Storm