Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252681 6.8 警告 VMware - VMware の Spring Framework および Spring Security におけるセキュリティ制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2894 2011-10-12 15:11 2011-09-9 Show GitHub Exploit DB Packet Storm
252682 - - （複数のベンダ） - UPnP 対応の複数のルータにアクセス制限不備の脆弱性 - - 2011-10-12 14:57 2011-10-6 Show GitHub Exploit DB Packet Storm
252683 10 危険 Iceni Technology - Iceni Argus にバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3332 2011-10-12 14:42 2011-10-6 Show GitHub Exploit DB Packet Storm
252684 7.5 危険 Likno Software Inc. - WordPress 用 Allwebmenus プラグイン内にある actions.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3981 2011-10-11 10:23 2011-10-4 Show GitHub Exploit DB Packet Storm
252685 6 警告 Jerome Schneider - TYPO3 で利用される Drag Drop Mass Upload における任意のファイルをアップロードされる脆弱性 CWE-noinfo
情報不足 		CVE-2011-3980 2011-10-11 10:20 2011-07-9 Show GitHub Exploit DB Packet Storm
252686 4.3 警告 Zikula Foundation - Zikula Application Framework の Theme モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3979 2011-10-11 10:18 2011-09-9 Show GitHub Exploit DB Packet Storm
252687 3.5 注意 LightNEasy - LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3978 2011-10-11 10:15 2011-10-4 Show GitHub Exploit DB Packet Storm
252688 7.2 危険 NoMachine - NoMachine NX Node および NX Server の nxconfigure.sh における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2011-3977 2011-10-11 10:13 2011-08-5 Show GitHub Exploit DB Packet Storm
252689 5 警告 IceWarp, Inc. - IceWarp Mail Server の IceWarp WebMail における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3580 2011-10-11 10:11 2011-09-30 Show GitHub Exploit DB Packet Storm
252690 6.4 警告 IceWarp, Inc. - IceWarp Mail Server の server/webmail.php における任意のファイルを読まれる脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3579 2011-10-11 10:10 2011-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311761 - - - Multi-DNC – CWE-35: Path Traversal: '.../...//' CWE-35
 Path Traversal: '.../...//' 		CVE-2024-45248 2024-10-8 02:47 2024-10-6 Show GitHub Exploit DB Packet Storm
311762 - - - A vulnerability classified as problematic was found in Sovell Smart Canteen System up to 3.0.7303.30513. Affected by this vulnerability is the function Check_ET_CheckPwdz201 of the file suanfa.py of … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-9554 2024-10-8 02:47 2024-10-6 Show GitHub Exploit DB Packet Storm
311763 - - - Sonarr – CWE-601: URL Redirection to Untrusted Site ('Open Redirect') CWE-601
Open Redirect 		CVE-2024-45247 2024-10-8 02:47 2024-10-6 Show GitHub Exploit DB Packet Storm
311764 - - - Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element CWE-427
 Uncontrolled Search Path Element 		CVE-2024-45246 2024-10-8 02:47 2024-10-6 Show GitHub Exploit DB Packet Storm
311765 - - - Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-200
Information Exposure 		CVE-2024-45245 2024-10-8 02:47 2024-10-6 Show GitHub Exploit DB Packet Storm
311766 - - - A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /MultiServerBackService?path=1. The manipulation of the a… CWE-89
SQL Injection 		CVE-2024-9536 2024-10-8 02:47 2024-10-6 Show GitHub Exploit DB Packet Storm
311767 5.3 MEDIUM
Network 		automattic sensei_lms The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates. NVD-CWE-noinfo
CVE-2024-7786 2024-10-8 02:46 2024-09-4 Show GitHub Exploit DB Packet Storm
311768 4.3 MEDIUM
Network 		snapshot_backup_project snapshot_backup The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add St… CWE-352
 Origin Validation Error 		CVE-2024-7689 2024-10-8 02:45 2024-09-9 Show GitHub Exploit DB Packet Storm
311769 4.3 MEDIUM
Network 		azindex_project azindex The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS… CWE-352
 Origin Validation Error 		CVE-2024-7687 2024-10-8 02:45 2024-09-9 Show GitHub Exploit DB Packet Storm
311770 4.8 MEDIUM
Network 		myeventon eventon The EventON WordPress plugin before 2.2.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when un… CWE-79
Cross-site Scripting 		CVE-2024-6910 2024-10-8 02:45 2024-09-9 Show GitHub Exploit DB Packet Storm