Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 26, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252441 | 4.3 | 警告 | Parallels | - | Parallels Plesk Panel の Server Administration Panel におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4726 | 2011-12-19 16:28 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 252442 | 7.5 | 危険 | Parallels | - | Parallels Plesk Panel の Server Administration Panel における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4725 | 2011-12-19 16:28 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 252443 | 9.3 | 危険 | Nullsoft | - | Winamp の in_avi.dll プラグインにおける整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2011-3834 | 2011-12-19 16:18 | 2011-12-9 | Show | GitHub Exploit DB Packet Storm |
| 252444 | 10 | 危険 | SmarterTools Inc. | - | SmarterTools SmarterStats における詳細不明な脆弱性 |
CWE-DesignError
|
CVE-2011-4752 | 2011-12-19 16:18 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 252445 | 5 | 警告 | SmarterTools Inc. | - | SmarterTools SmarterStats における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-4751 | 2011-12-19 16:17 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 252446 | 4.3 | 警告 | SmarterTools Inc. | - | SmarterTools SmarterStats におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4750 | 2011-12-19 16:16 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 252447 | 4.6 | 警告 | ヒューレット・パッカード IBM オラクル |
- | HP ALM 内の getInstalledPackages 関数における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-4834 | 2011-12-19 15:08 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 252448 | 7.5 | 危険 | SugarCRM | - | SugarCRM の Leads モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4833 | 2011-12-19 15:08 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 252449 | 7.5 | 危険 | Moxiecode Systems AB phpMyFAQ PHPletter |
- | 複数の製品で使用される inc/function.base.php における PHP コードを挿入される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4825 | 2011-12-19 15:07 | 2011-10-25 | Show | GitHub Exploit DB Packet Storm |
| 252450 | 7.5 | 危険 | The Cacti Group | - | Cacti の auth_login.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4824 | 2011-12-19 15:06 | 2011-09-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 26, 2026, 4:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254001 | 6.1 |
MEDIUM
Network |
bestwebsoft | updater | The updater plugin before 1.35 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18565 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254002 | 6.1 |
MEDIUM
Network |
content_audit_project | content_audit | The content-audit plugin before 1.9.2 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2017-18560 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254003 | 6.1 |
MEDIUM
Network |
bestwebsoft | testimonials | The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18558 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254004 | 6.1 |
MEDIUM
Network |
bestwebsoft | google_maps | The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18557 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254005 | 6.1 |
MEDIUM
Network |
bestwebsoft | google_analytics | The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18556 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254006 | 6.1 |
MEDIUM
Network |
mediaburst | booking_calendar | The booking-sms plugin before 1.1.0 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2017-18555 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254007 | 6.1 |
MEDIUM
Network |
analytics_tracker_project | analytics_tracker | The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event. |
CWE-79
Cross-site Scripting |
CVE-2017-18554 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254008 | 6.1 |
MEDIUM
Network |
ad_buttons_project | ad_buttons | The ad-buttons plugin before 2.3.2 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2017-18553 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254009 | 6.1 |
MEDIUM
Network |
deepsoft | weblibrarian | The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes. |
CWE-79
Cross-site Scripting |
CVE-2017-18540 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |
| 254010 | 6.1 |
MEDIUM
Network |
deepsoft | weblibrarian | The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes. |
CWE-79
Cross-site Scripting |
CVE-2017-18539 | 2024-11-21 12:20 | 2019-08-21 | Show | GitHub Exploit DB Packet Storm |