Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251481	7.5	危険	Atcom S.A.	-	ATCOM Netvolution における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-3340	2011-10-31 10:29	2011-10-21	Show	GitHub Exploit DB Packet Storm

251482	6.5	警告	BlackBerry	-	BlackBerry Collaboration Service における任意のユーザアカウントへログインされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0290	2011-10-31 10:29	2011-10-11	Show	GitHub Exploit DB Packet Storm

251483	7.5	危険	Atcom S.A.	-	ATCOM Netvolution の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4967	2011-10-31 10:28	2011-10-21	Show	GitHub Exploit DB Packet Storm

251484	4.3	警告	Atcom S.A.	-	ATCOM Netvolution の default.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4966	2011-10-31 10:27	2011-10-21	Show	GitHub Exploit DB Packet Storm

251485	4.3	警告	Atcom S.A.	-	ATCOM Netvolution におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5103	2011-10-31 10:27	2011-10-21	Show	GitHub Exploit DB Packet Storm

251486	7.5	危険	Atcom S.A.	-	ATCOM Netvolution の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-5102	2011-10-31 10:26	2011-10-21	Show	GitHub Exploit DB Packet Storm

251487	7.8	危険	MIT Kerberos レッドハット	-	MIT Kerberos の kdb_ldap プラグインにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-1527	2011-10-31 10:12	2011-10-18	Show	GitHub Exploit DB Packet Storm

251488	4.3	警告	GNOME Project	-	Empathy の theme_adium_append_message 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4170	2011-10-31 10:12	2011-10-23	Show	GitHub Exploit DB Packet Storm

251489	4.3	警告	GNOME Project	-	Empathy の theme_adium_append_message 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3635	2011-10-31 10:11	2011-10-23	Show	GitHub Exploit DB Packet Storm

251490	1.2	注意	ヒューレット・パッカード	-	HP MFP Digital Sending ソフトウェアにおける重要なワークフローメタデータ情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3163	2011-10-31 10:10	2011-10-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269021	6.5	MEDIUM Network	wplegalpages	wp_legal_pages	The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, …	CWE-352 Origin Validation Error	CVE-2015-9428	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269022	6.5	MEDIUM Network	googmonify_project	googmonify	The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter.	CWE-352 Origin Validation Error	CVE-2015-9427	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269023	4.6	MEDIUM Network	manual_image_crop_project	manual_image_crop	The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.	CWE-79 Cross-site Scripting	CVE-2015-9426	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269024	5.4	MEDIUM Network	byonepress	social_locker	The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opanda-item&page=license-manager-sociallocker-next licensekey parameter.	CWE-352 Origin Validation Error	CVE-2015-9425	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269025	6.5	MEDIUM Network	doc4design	multicons	The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter.	CWE-352 Origin Validation Error	CVE-2015-9424	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269026	5.4	MEDIUM Network	simplysymphony	plugnedit	The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditBGColor, PlugneditEditorMargin, plugnedit…	CWE-79 Cross-site Scripting	CVE-2015-9423	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269027	6.5	MEDIUM Network	simplysymphony	plugnedit	The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, …	CWE-352 Origin Validation Error	CVE-2015-9422	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269028	6.5	MEDIUM Network	olevmedia	olevmedia_shortcodes	The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.	CWE-352 Origin Validation Error	CVE-2015-9421	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269029	6.1	MEDIUM Network	mightymess	soundcloud_is_gold	The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.	CWE-79 Cross-site Scripting	CVE-2015-9420	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

269030	6.1	MEDIUM Network	captain-slider_project	captain-slider	The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.	CWE-79 Cross-site Scripting	CVE-2015-9419	2024-11-21 11:40	2019-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed