Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217061 4 警告 東芝テック - 東芝テック製 e-Studio シリーズにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-1990 2014-04-28 18:07 2014-04-18 Show GitHub Exploit DB Packet Storm
217062 4.3 警告 LYSESOFT - AndExplorer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1974 2014-04-28 18:05 2014-04-18 Show GitHub Exploit DB Packet Storm
217063 7.1 危険 サイボウズ - サイボウズ リモートサービスマネージャーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-1983 2014-04-28 17:59 2014-04-18 Show GitHub Exploit DB Packet Storm
217064 5.8 警告 サイボウズ - サイボウズ リモートサービスマネージャーにおけるセッション固定の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1984 2014-04-28 17:58 2014-04-18 Show GitHub Exploit DB Packet Storm
217065 4.3 警告 Ushahidi - Ushahidi Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2025 2014-04-28 17:51 2013-05-1 Show GitHub Exploit DB Packet Storm
217066 3.5 注意 Episerver - Ektron CMS の content.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2729 2014-04-28 17:42 2014-04-16 Show GitHub Exploit DB Packet Storm
217067 9.3 危険 Power Software - Power Software の WinArchiver におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-5660 2014-04-28 17:13 2013-04-29 Show GitHub Exploit DB Packet Storm
217068 4.3 警告 JoomlaBoat.com - Joomla! 用 YouTube Gallery コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5956 2014-04-28 16:17 2013-09-27 Show GitHub Exploit DB Packet Storm
217069 6.8 警告 OpenX - OpenX におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-5954 2014-04-28 16:04 2013-09-27 Show GitHub Exploit DB Packet Storm
217070 4.3 警告 Moxiecode Systems AB - TinyMCE の bbcode プラグインにおけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4230 2014-04-28 15:49 2012-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294771 7.5 HIGH
Network 		busybox
debian
canonical 		busybox
debian_linux
ubuntu_linux 		Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink. CWE-22
Path Traversal 		CVE-2011-5325 2024-11-21 10:34 2017-08-8 Show GitHub Exploit DB Packet Storm
294772 7.5 HIGH
Network 		debian
enlightenment 		debian_linux
imlib2 		imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse. CWE-189
Numeric Errors 		CVE-2011-5326 2024-11-21 10:34 2016-05-14 Show GitHub Exploit DB Packet Storm
294773 5.5 MEDIUM
Local 		linux linux_kernel The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and … NVD-CWE-Other
CVE-2011-5321 2024-11-21 10:34 2016-05-2 Show GitHub Exploit DB Packet Storm
294774 - gehealthcare centricity_pacs-iw The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of (1) shared for the shared user and (2) scan for the scan user, which… CWE-255
Credentials Management 		CVE-2011-5324 2024-11-21 10:34 2015-08-4 Show GitHub Exploit DB Packet Storm
294775 - gehealthcare centricity_pacs-iw GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which has unspecified impact and attack vectors. NOTE: it is no… CWE-255
Credentials Management 		CVE-2011-5323 2024-11-21 10:34 2015-08-4 Show GitHub Exploit DB Packet Storm
294776 - gehealthcare centricity_analytics_server GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the vie… CWE-255
Credentials Management 		CVE-2011-5322 2024-11-21 10:34 2015-08-4 Show GitHub Exploit DB Packet Storm
294777 - google chrome content/renderer/device_sensors/device_motion_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate accelerometer data, which makes it easier for remote at… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-5319 2024-11-21 10:34 2015-03-9 Show GitHub Exploit DB Packet Storm
294778 - diafan diafan.cms Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a s… CWE-352
 Origin Validation Error 		CVE-2011-5318 2024-11-21 10:34 2015-01-1 Show GitHub Exploit DB Packet Storm
294779 - wondercms wondercms Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter. CWE-79
Cross-site Scripting 		CVE-2011-5317 2024-11-21 10:34 2015-01-1 Show GitHub Exploit DB Packet Storm
294780 - cambio_project cambio Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authentication of administrators for requests that modify credentia… CWE-352
 Origin Validation Error 		CVE-2011-5316 2024-11-21 10:34 2015-01-1 Show GitHub Exploit DB Packet Storm