Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228931 4.3 警告 Trionic Labs - WordPress 用 Sentinel プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5225 2012-10-29 15:37 2012-10-25 Show GitHub Exploit DB Packet Storm
228932 7.5 危険 Trionic Labs - WordPress 用 Sentinel プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5224 2012-10-29 15:35 2012-10-25 Show GitHub Exploit DB Packet Storm
228933 4.3 警告 The Cacti Group - Cacti の logout.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5223 2012-10-29 15:25 2011-12-11 Show GitHub Exploit DB Packet Storm
228934 7.5 危険 Scripte24Shop - PHP Flirt-Projekt の rub2_w.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5222 2012-10-29 15:22 2012-10-25 Show GitHub Exploit DB Packet Storm
228935 4.3 警告 WebSVN - WebSVN の svnlook.php 内の getLog 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5221 2012-10-29 15:19 2010-04-20 Show GitHub Exploit DB Packet Storm
228936 4.3 警告 Cristopher Shi - PHP-SCMS の templates/default/Admin/Login.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5220 2012-10-29 15:18 2012-10-25 Show GitHub Exploit DB Packet Storm
228937 5 警告 Ian Back - mPDF の examples/show_code.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5219 2012-10-29 15:18 2012-10-25 Show GitHub Exploit DB Packet Storm
228938 7.5 危険 DotA OpenStats - DotA OpenStats における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5218 2012-10-29 15:17 2012-10-25 Show GitHub Exploit DB Packet Storm
228939 5 警告 日立 - 日立の JP1/ServerConductor/DeploymentManager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5217 2012-10-29 15:13 2011-12-15 Show GitHub Exploit DB Packet Storm
228940 7.5 危険 Rustici Software - WordPress 用 SCORM Cloud For WordPress プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5216 2012-10-29 15:05 2012-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249121 5.4 MEDIUM
Network 		themepunch slider_revolution The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7.18 due to insufficient input sanitization and ou… CWE-79
Cross-site Scripting 		CVE-2024-8107 2024-11-14 03:06 2024-10-1 Show GitHub Exploit DB Packet Storm
249122 5.4 MEDIUM
Network 		benjaminzekavica easy_svg_support The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 3.7 due to insufficient input sanitization a… CWE-79
Cross-site Scripting 		CVE-2024-10269 2024-11-14 02:59 2024-11-8 Show GitHub Exploit DB Packet Storm
249123 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk may decompress into more than LZNT_CHUNK_… CWE-125
Out-of-bounds Read 		CVE-2024-50247 2024-11-14 02:58 2024-11-9 Show GitHub Exploit DB Packet Storm
249124 7.2 HIGH
Network 		wavlink wn530h4_firmware
wn530hg4_firmware
wn572hg3_firmware 		A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected is the function set_ipv6 of the file internet.cgi. The manipulation of the arg… CWE-77
Command Injection 		CVE-2024-10429 2024-11-14 02:58 2024-10-28 Show GitHub Exploit DB Packet Storm
249125 7.2 HIGH
Network 		wavlink wn530h4_firmware
wn530hg4_firmware
wn572hg3_firmware 		A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This issue affects the function set_ipv6 of the file firewall.cgi. The manipulation … CWE-77
Command Injection 		CVE-2024-10428 2024-11-14 02:57 2024-10-28 Show GitHub Exploit DB Packet Storm
249126 4.3 MEDIUM
Network 		jenkins jenkins Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field. CWE-209
Information Exposure Through an Error Message 		CVE-2024-47803 2024-11-14 02:45 2024-10-3 Show GitHub Exploit DB Packet Storm
249127 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr alloc_size check NVD-CWE-noinfo
CVE-2024-50246 2024-11-14 02:38 2024-11-9 Show GitHub Exploit DB Packet Storm
249128 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across multiple calls to nvmet_setup_dhgroup()… CWE-415
 Double Free 		CVE-2024-50215 2024-11-14 02:35 2024-11-9 Show GitHub Exploit DB Packet Storm
249129 7.5 HIGH
Network 		jenkins credentials Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `confi… CWE-522
 Insufficiently Protected Credentials 		CVE-2024-47805 2024-11-14 02:32 2024-10-3 Show GitHub Exploit DB Packet Storm
249130 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix possible deadlock in mi_read Mutex lock with another subclass used in ni_lock_dir(). NVD-CWE-noinfo
CVE-2024-50245 2024-11-14 02:29 2024-11-9 Show GitHub Exploit DB Packet Storm