Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253501 4.3 警告 アップル - Apple Safari のウインドウの機能における任意のローカルファイルが送信される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0167 2011-04-6 18:01 2011-03-11 Show GitHub Exploit DB Packet Storm
253502 5.8 警告 アップル - Apple Safari の HTML5 ドラッグ&ドロップの機能における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0166 2011-04-6 17:38 2011-03-11 Show GitHub Exploit DB Packet Storm
253503 5 警告 アップル - Apple iOS の Safari にある Safari 設定機能におけるユーザを追跡可能な脆弱性 CWE-20
不適切な入力確認
CVE-2011-0159 2011-04-6 17:34 2011-03-11 Show GitHub Exploit DB Packet Storm
253504 7.5 危険 アップル - Apple iOS の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0157 2011-04-6 17:29 2011-03-11 Show GitHub Exploit DB Packet Storm
253505 5 警告 OpenSLP - OpenSLP にサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-3609 2011-04-6 17:27 2011-03-22 Show GitHub Exploit DB Packet Storm
253506 5.8 警告 Apache Software Foundation - Apache Tomcat におけるアクセス制限を回避される脆弱性 CWE-DesignError
CVE-2011-1088 2011-04-6 17:23 2011-03-11 Show GitHub Exploit DB Packet Storm
253507 9.3 危険 マイクロソフト - Microsoft Groove 2007 における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3146 2011-04-6 17:09 2011-03-8 Show GitHub Exploit DB Packet Storm
253508 9.3 危険 マイクロソフト - Microsoft Remote Desktop Connection のクライアントにおける権限昇格の脆弱性 CWE-Other
その他
CVE-2011-0029 2011-04-6 16:57 2011-03-8 Show GitHub Exploit DB Packet Storm
253509 9.3 危険 マイクロソフト - 複数の Microsoft 製品の SBE.dll における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2011-0042 2011-04-6 16:53 2011-03-8 Show GitHub Exploit DB Packet Storm
253510 9.3 危険 マイクロソフト - 複数の Microsoft 製品の DirectShow における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-0032 2011-04-6 16:17 2011-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311741 6.1 MEDIUM
Network
stellarwp the_events_calendar The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all versions up to, and including, 6.6.3 due to insufficient input sanitization and ou… CWE-79
Cross-site Scripting
CVE-2024-6931 2024-10-5 04:08 2024-09-27 Show GitHub Exploit DB Packet Storm
311742 5.4 MEDIUM
Network
leap13 premium_addons_for_elementor The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52 due to insufficient… CWE-79
Cross-site Scripting
CVE-2024-8681 2024-10-5 04:04 2024-09-27 Show GitHub Exploit DB Packet Storm
311743 5.4 MEDIUM
Network
codesupply absolute_reviews The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of a custom post criteria in all versions up to, and including, 1.1.3 due to insufficient i… CWE-79
Cross-site Scripting
CVE-2024-8965 2024-10-5 04:04 2024-09-27 Show GitHub Exploit DB Packet Storm
311744 8.8 HIGH
Network
advantech adam-5630_firmware Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites fro… CWE-352
 Origin Validation Error
CVE-2024-28948 2024-10-5 03:58 2024-09-28 Show GitHub Exploit DB Packet Storm
311745 5.4 MEDIUM
Network
hyumika openstreetmap The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and osm_map_v3 shortcodes in all versions up to, and including, 6.1.0 due to insuffi… CWE-79
Cross-site Scripting
CVE-2024-8991 2024-10-5 03:56 2024-09-27 Show GitHub Exploit DB Packet Storm
311746 5.4 MEDIUM
Network
fastlinemedia beaver_builder The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Group module in all versions up to, and including, 2.8.3.6 due to… CWE-79
Cross-site Scripting
CVE-2024-9049 2024-10-5 03:53 2024-09-27 Show GitHub Exploit DB Packet Storm
311747 4.3 MEDIUM
Network
bg5sbk minicms A vulnerability was found in bg5sbk MiniCMS 1.11. It has been classified as problematic. Affected is an unknown function of the file page-edit.php. The manipulation leads to cross-site request forger… CWE-352
 Origin Validation Error
CVE-2024-9282 2024-10-5 03:33 2024-09-27 Show GitHub Exploit DB Packet Storm
311748 7.5 HIGH
Network
amirraminfar dozzle Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches … CWE-326
Inadequate Encryption Strength
CVE-2024-47182 2024-10-5 03:31 2024-09-27 Show GitHub Exploit DB Packet Storm
311749 8.2 HIGH
Network
openpetra openpetra Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function. CWE-79
Cross-site Scripting
CVE-2024-40510 2024-10-5 03:28 2024-09-28 Show GitHub Exploit DB Packet Storm
311750 8.8 HIGH
Network
themewinter eventin The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.8 via multiple style paramete… CWE-22
Path Traversal
CVE-2024-7149 2024-10-5 03:23 2024-09-27 Show GitHub Exploit DB Packet Storm