Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252031	5	警告	LG-Nortel	-	LG-Nortel ELO GS24M に複数の脆弱性	CWE-287 不適切な認証	CVE-2012-1838	2012-03-26 16:29	2012-03-22	Show	GitHub Exploit DB Packet Storm

252032	7.5	危険	Webglimpse	-	WebGlimpse に OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1795	2012-03-26 16:24	2012-03-20	Show	GitHub Exploit DB Packet Storm

252033	7.5	危険	Pydio	-	AjaXplorer におけるログインのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-1840	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

252034	7.5	危険	Pydio	-	AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1839	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

252035	5	警告	IBM	-	IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1837	2012-03-26 16:07	2012-03-22	Show	GitHub Exploit DB Packet Storm

252036	4.3	警告	IBM	-	IBM Tivoli Endpoint Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0719	2012-03-26 16:04	2012-03-22	Show	GitHub Exploit DB Packet Storm

252037	4.3	警告	ESET K7 Computing AVG Technologies トレンドマイクロ Ikarus Norman ソフォスマカフィー Beijing Rising International Software BitDefender VirusBlokAda フォーティネットカスペルスキー Emsisoft Authentium シマンテックエフ・セキュア Jiangmin	-	複数の製品の Gzip ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1461	2012-03-26 14:35	2012-03-21	Show	GitHub Exploit DB Packet Storm

252038	4.3	警告	ESET トレンドマイクロ AVG Technologies マカフィー Ikarus Norman ソフォス Beijing Rising International Software Comodo FRISK Software International クイックヒール・テクノロジーズ・ジャパン株式会社アラジンフォーティネット Panda Security カスペルスキー Emsisoft シマンテック	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1456	2012-03-26 14:28	2012-03-21	Show	GitHub Exploit DB Packet Storm

252039	4.3	警告	Beijing Rising International Software ESET	-	NOD32 Antivirus および Rising Antivirus の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1455	2012-03-26 14:26	2012-03-21	Show	GitHub Exploit DB Packet Storm

252040	4.3	警告	トレンドマイクロ Ikarus Emsisoft クイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1448	2012-03-26 14:08	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311291	8.8	HIGH Network	cmorillas1	external_database_based_actions	The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_han…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2024-10311	2024-11-20 02:03	2024-11-15	Show	GitHub Exploit DB Packet Storm

311292	5.4	MEDIUM Network	wpdeveloper	essential_addons_for_elementor	The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nomore_items_text…	CWE-79 Cross-site Scripting	CVE-2024-8961	2024-11-20 02:01	2024-11-15	Show	GitHub Exploit DB Packet Storm

311293	9.8	CRITICAL Network	vanquish	user_extra_fields	The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to…	CWE-22 Path Traversal	CVE-2024-11150	2024-11-20 01:57	2024-11-13	Show	GitHub Exploit DB Packet Storm

311294	-		-	-	Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via the Device_DeviceID.dat.bak file within the C:\ProgramData…	-	CVE-2024-50804	2024-11-20 01:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

311295	-		-	-	Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution	-	CVE-2024-50919	2024-11-20 01:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

311296	-		-	-	A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.	-	CVE-2024-48294	2024-11-20 01:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

311297	-		-	-	Incorrect access control in QuickHeal Antivirus Pro 24.1.0.182 and earlier allows authenticated attackers with low-level privileges to arbitrarily modify antivirus settings.	-	CVE-2024-48293	2024-11-20 01:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

311298	-		-	-	An issue in the wssrvc.exe service of QuickHeal Antivirus Pro Version v24.0 and Quick Heal Total Security v24.0 allows authenticated attackers to escalate privileges.	-	CVE-2024-48292	2024-11-20 01:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

311299	-		-	-	Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header.	-	CVE-2023-49952	2024-11-20 01:35	2024-11-19	Show	GitHub Exploit DB Packet Storm

311300	-		-	-	An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacke…	-	CVE-2024-52945	2024-11-20 01:35	2024-11-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed