Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251601 7.5 危険 Sven Verdoolaege - CGI::Fast にて使用される FCGI における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-2766 2011-09-28 14:58 2011-09-23 Show GitHub Exploit DB Packet Storm
251602 2.1 注意 OpenFabrics Alliance - OpenFabrics エンタープライズディストリビューションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3345 2011-09-28 14:51 2010-12-21 Show GitHub Exploit DB Packet Storm
251603 5 警告 CAREL INDUSTRIES S.p.a. - Carel PlantVisor の CarelDataServer.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3487 2011-09-28 14:13 2011-09-16 Show GitHub Exploit DB Packet Storm
251604 10 危険 MetaStock - Equis MetaStock における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3488 2011-09-28 14:10 2011-09-16 Show GitHub Exploit DB Packet Storm
251605 5 警告 Rockwell Automation - Rockwell RSLogix の RnaUtility.dll におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3489 2011-09-28 13:53 2011-09-16 Show GitHub Exploit DB Packet Storm
251606 10 危険 AzeoTech, Inc. - Azeotech DAQFactory におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3492 2011-09-28 13:49 2011-09-16 Show GitHub Exploit DB Packet Storm
251607 10 危険 ヒューレット・パッカード - HP Business Service Automation Essentials における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2412 2011-09-27 11:28 2011-09-19 Show GitHub Exploit DB Packet Storm
251608 3.5 注意 シスコシステムズ - Cisco TelePresence System MXP の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2544 2011-09-27 11:24 2011-09-23 Show GitHub Exploit DB Packet Storm
251609 4.3 警告 MantisBT Group - MantisBT の bug_actiongroup_ext_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3578 2011-09-27 11:19 2011-08-31 Show GitHub Exploit DB Packet Storm
251610 4.3 警告 MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3358 2011-09-27 11:18 2011-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306021 - - - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2024-8938 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306022 - - - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The Middle attack… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2024-8937 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306023 - - - CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus… CWE-20
 Improper Input Validation  		CVE-2024-8936 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306024 - - - CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integrity of controllers when conducting a Man-In-The-Middle attac… CWE-290
 Authentication Bypass by Spoofing 		CVE-2024-8935 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306025 - - - CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service… - CVE-2024-8933 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306026 7.5 HIGH
Network 		- - The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.24.01.24 via the js/fallback.php file. This makes it possible for unauthenticat… - CVE-2024-10816 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306027 5.3 MEDIUM
Network 		- - The Hash Elements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hash_elements_get_posts_title_by_id() function in all versions up to, and … CWE-862
 Missing Authorization 		CVE-2024-10802 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306028 4.3 MEDIUM
Network 		- - The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.6 via the 'bhf' shortcode due to insufficient res… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10794 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306029 7.3 HIGH
Network 		- - The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10174 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
306030 6.1 MEDIUM
Network 		- - The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping o… CWE-79
Cross-site Scripting 		CVE-2024-10882 2024-11-13 12:15 2024-11-13 Show GitHub Exploit DB Packet Storm