Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217301 4.3 警告 Silex Labs - Silex におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1971 2014-03-24 18:25 2014-03-20 Show GitHub Exploit DB Packet Storm
217302 6.5 警告 IBM - IBM Rational ClearCase におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0829 2014-03-24 17:51 2014-03-19 Show GitHub Exploit DB Packet Storm
217303 3.5 注意 IBM - IBM QuickFile におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6729 2014-03-24 17:50 2013-11-8 Show GitHub Exploit DB Packet Storm
217304 5 警告 IBM - IBM WebSphere MQ Internet Pass-Thru におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-5401 2014-03-24 17:50 2013-08-22 Show GitHub Exploit DB Packet Storm
217305 6.5 警告 SIR - GNUboard の bbs/ajax.autosave.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2339 2014-03-24 17:41 2014-03-14 Show GitHub Exploit DB Packet Storm
217306 4.3 警告 Purple Beanie - Joomla! 用 PBBooking コンポーネントの manage.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5955 2014-03-24 17:41 2013-09-27 Show GitHub Exploit DB Packet Storm
217307 4.3 警告 CodePeople - Joomla! 用 Multi Calendar コンポーネントの tmpl/layout_editevent.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5953 2014-03-24 17:41 2013-09-27 Show GitHub Exploit DB Packet Storm
217308 4.3 警告 Codologic.com - Joomla! 用 FreiChat コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5952 2014-03-24 17:40 2013-09-27 Show GitHub Exploit DB Packet Storm
217309 7.5 危険 MantisBT Group - MantisBT における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1609 2014-03-24 17:39 2014-02-7 Show GitHub Exploit DB Packet Storm
217310 7.5 危険 MantisBT Group - MantisBT の api/soap/mc_file_api.php の the mci_file_get 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1608 2014-03-24 17:38 2014-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295011 - wikkawiki wikkawiki actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, w… NVD-CWE-noinfo
CVE-2011-4449 2024-11-21 10:32 2012-09-6 Show GitHub Exploit DB Packet Storm
295012 - wikkawiki wikkawiki SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL commands via the default_comment_display parameter i… CWE-89
SQL Injection 		CVE-2011-4448 2024-11-21 10:32 2012-09-6 Show GitHub Exploit DB Packet Storm
295013 - tedfelix acpid2 event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to (1) perform write operations within … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4578 2024-11-21 10:32 2012-08-30 Show GitHub Exploit DB Packet Storm
295014 - ffmpeg
libav 		ffmpeg
libav 		The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-4579 2024-11-21 10:32 2012-08-21 Show GitHub Exploit DB Packet Storm
295015 - ffmpeg
libav 		ffmpeg
libav 		Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-4364 2024-11-21 10:32 2012-08-21 Show GitHub Exploit DB Packet Storm
295016 - ffmpeg
libav 		ffmpeg
libav 		The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-4353 2024-11-21 10:32 2012-08-21 Show GitHub Exploit DB Packet Storm
295017 - libav
ffmpeg 		libav
ffmpeg 		Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x … CWE-189
Numeric Errors 		CVE-2011-4352 2024-11-21 10:32 2012-08-21 Show GitHub Exploit DB Packet Storm
295018 - bitcoin wxbitcoin
bitcoin_core 		The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers t… CWE-310
Cryptographic Issues 		CVE-2011-4447 2024-11-21 10:32 2012-08-7 Show GitHub Exploit DB Packet Storm
295019 - moodle moodle Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/action_redir group messages, which allows remote authenticated users to discover e-mail addresses … CWE-200
Information Exposure 		CVE-2011-4593 2024-11-21 10:32 2012-07-20 Show GitHub Exploit DB Packet Storm
295020 - moodle moodle The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4592 2024-11-21 10:32 2012-07-20 Show GitHub Exploit DB Packet Storm