Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252471 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0564 2011-03-8 12:36 2011-02-8 Show GitHub Exploit DB Packet Storm
252472 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0563 2011-03-8 12:36 2011-02-8 Show GitHub Exploit DB Packet Storm
252473 6.9 警告 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0562 2011-03-8 12:36 2011-02-8 Show GitHub Exploit DB Packet Storm
252474 6.4 警告 マイクロソフト - 複数の Microsoft 製品の Kerberos 実装における権限昇格の脆弱性 CWE-287
不適切な認証 		CVE-2011-0091 2011-03-7 15:08 2011-02-8 Show GitHub Exploit DB Packet Storm
252475 7.2 危険 マイクロソフト - 複数の Microsoft 製品の Kerberos 実装における権限昇格の脆弱性 CWE-310
暗号の問題 		CVE-2011-0043 2011-03-7 15:05 2011-02-8 Show GitHub Exploit DB Packet Storm
252476 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0090 2011-03-7 15:03 2011-02-8 Show GitHub Exploit DB Packet Storm
252477 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0089 2011-03-7 15:00 2011-02-8 Show GitHub Exploit DB Packet Storm
252478 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0088 2011-03-7 14:57 2011-02-8 Show GitHub Exploit DB Packet Storm
252479 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0087 2011-03-7 14:54 2011-02-8 Show GitHub Exploit DB Packet Storm
252480 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0086 2011-03-7 14:52 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266111 9.8 CRITICAL
Network 		ays-pro photo_gallery The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection. CWE-89
SQL Injection 		CVE-2016-10921 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266112 6.1 MEDIUM
Network 		sir gnucommerce The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10920 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266113 6.1 MEDIUM
Network 		wassup_real_time_analytics_project wassup_real_time_analytics The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633. CWE-79
Cross-site Scripting 		CVE-2016-10919 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266114 8.8 HIGH
Network 		supsystic photo_gallery The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF. CWE-352
 Origin Validation Error 		CVE-2016-10918 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266115 9.8 CRITICAL
Network 		search_everything_project search_everything The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316. CWE-89
SQL Injection 		CVE-2016-10917 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266116 9.8 CRITICAL
Network 		codepeople appointment_booking_calendar The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319. CWE-89
SQL Injection 		CVE-2016-10916 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266117 6.1 MEDIUM
Network 		pojo activity_log The aryo-activity-log plugin before 2.3.3 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10891 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266118 6.1 MEDIUM
Network 		matchboxdesigngroup universal_analytics The universal-analytics plugin before 1.3.1 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10912 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266119 6.1 MEDIUM
Network 		cozmoslabs profile_builder The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2016-10911 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
266120 6.1 MEDIUM
Network 		formbuilder_project formbuilder The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2016-10910 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm