Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252191 4.3 警告 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2011-06-15 14:16 2011-06-15 Show GitHub Exploit DB Packet Storm
252192 4.3 警告 マイクロソフト - Microsoft 製 MSXML における HTTP リクエスト処理に関する脆弱性 CWE-Other
その他 		- 2011-06-15 14:15 2011-06-15 Show GitHub Exploit DB Packet Storm
252193 5.8 警告 マイクロソフト - Internet Explorer におけるクリップボードの操作に関する脆弱性 CWE-Other
その他 		- 2011-06-15 14:15 2011-06-15 Show GitHub Exploit DB Packet Storm
252194 5 警告 マイクロソフト - Windows の VBScript 実装における情報漏えいの脆弱性 CWE-264
認可・権限・アクセス制御 		- 2011-06-15 14:14 2011-06-15 Show GitHub Exploit DB Packet Storm
252195 3.5 注意 IBM - IBM DB2 における SYSSTAT.TABLES 統計コラムを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1847 2011-06-15 09:54 2011-04-26 Show GitHub Exploit DB Packet Storm
252196 3.3 注意 シスコシステムズ - Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2056 2011-06-15 09:50 2009-08-18 Show GitHub Exploit DB Packet Storm
252197 4.3 警告 シスコシステムズ - Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2055 2011-06-15 09:50 2009-08-18 Show GitHub Exploit DB Packet Storm
252198 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2054 2011-06-15 09:49 2009-08-26 Show GitHub Exploit DB Packet Storm
252199 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2053 2011-06-15 09:49 2009-08-26 Show GitHub Exploit DB Packet Storm
252200 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager および Cisco Unified Presence におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2052 2011-06-14 10:09 2009-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4041 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… CWE-862
 Missing Authorization 		CVE-2026-39715 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4042 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in CKThemes Flipmart flipmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flipmart: from n/a through <= 2.8. CWE-862
 Missing Authorization 		CVE-2026-39716 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4043 6.4 MEDIUM
Network 		- - The PrivateContent Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' shortcode attribute in the [pc-login-form] shortcode in all versions up to, and including, 1.… CWE-79
Cross-site Scripting 		CVE-2026-4025 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4044 6.4 MEDIUM
Network 		- - The pdfl.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pdflio' shortcode in all versions up to, and including, 1.0.5. This is due to insufficient input sanitization an… CWE-79
Cross-site Scripting 		CVE-2026-4073 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4045 6.4 MEDIUM
Network 		- - The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in all versions up to, and including, 5.1.3. The plugin uses a custom `|***...***|` … CWE-79
Cross-site Scripting 		CVE-2026-4300 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4046 6.4 MEDIUM
Network 		- - The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wsm_showDayStatsGraph' shortcode in all versions up to, and including… CWE-79
Cross-site Scripting 		CVE-2026-4303 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4047 6.5 MEDIUM
Network 		- - The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. … CWE-352
 Origin Validation Error 		CVE-2026-1672 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4048 4.3 MEDIUM
Network 		- - The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. … CWE-352
 Origin Validation Error 		CVE-2026-1673 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4049 6.5 MEDIUM
Network 		- - The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to SQL Inje… CWE-89
SQL Injection 		CVE-2026-1865 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm
4050 6.4 MEDIUM
Network 		- - The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings[js]' parameter in versions up to, and including, 2.… CWE-79
Cross-site Scripting 		CVE-2026-2481 2026-04-25 03:05 2026-04-8 Show GitHub Exploit DB Packet Storm