Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217321 4.3 警告 ownCloud - ownCloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0201 2014-03-24 10:53 2013-01-22 Show GitHub Exploit DB Packet Storm
217322 4.3 警告 マカフィー
インテル		 - 複数の McAfee 製品および Intel Expressway Cloud Access 360-SSO におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2536 2014-03-24 10:30 2014-03-19 Show GitHub Exploit DB Packet Storm
217323 4 警告 マカフィー - McAfee Web Gateway におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2535 2014-03-24 10:29 2014-01-28 Show GitHub Exploit DB Packet Storm
217324 7.8 危険 ソフォス - Sophos UTM のカーネルの TCP スタックにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-2537 2014-03-24 10:26 2014-02-20 Show GitHub Exploit DB Packet Storm
217325 4.3 警告 ソフォス - Sophos Web Appliance におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2643 2014-03-24 10:25 2013-04-3 Show GitHub Exploit DB Packet Storm
217326 9.3 危険 ソフォス - Sophos Web Appliance における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-2642 2014-03-24 10:25 2013-04-3 Show GitHub Exploit DB Packet Storm
217327 5 警告 ソフォス - Sophos Web Appliance の patience.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2641 2014-03-24 10:24 2013-04-3 Show GitHub Exploit DB Packet Storm
217328 4.3 警告 Apache Software Foundation - Apache CouchDB の Futon UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5650 2014-03-20 19:21 2012-10-24 Show GitHub Exploit DB Packet Storm
217329 5 警告 Mochi Media
Apache Software Foundation		 - Apache CouchDB で使用される MochiWeb の mochiweb_util.erl の partition2 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-5641 2014-03-20 19:18 2012-12-14 Show GitHub Exploit DB Packet Storm
217330 5 警告 シスコシステムズ - Cisco Hosted Collaboration Solution の Impact サーバの GUI におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2122 2014-03-20 16:34 2014-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294891 - tor tor Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sen… CWE-200
Information Exposure 		CVE-2011-4897 2024-11-21 10:33 2011-12-23 Show GitHub Exploit DB Packet Storm
294892 - tor tor Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about … CWE-200
Information Exposure 		CVE-2011-4896 2024-11-21 10:33 2011-12-23 Show GitHub Exploit DB Packet Storm
294893 - tor tor Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by ob… CWE-200
Information Exposure 		CVE-2011-4895 2024-11-21 10:33 2011-12-23 Show GitHub Exploit DB Packet Storm
294894 - tor tor Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by … CWE-200
Information Exposure 		CVE-2011-4894 2024-11-21 10:33 2011-12-23 Show GitHub Exploit DB Packet Storm
294895 - unbound unbound validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a m… CWE-399
 Resource Management Errors 		CVE-2011-4869 2024-11-21 10:33 2011-12-20 Show GitHub Exploit DB Packet Storm
294896 - schneider-electric quantum_ethernet_module_140noe77101
quantum_ethernet_module_140noe77100
quantum_ethernet_module_140noe77111 		The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updat… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4861 2024-11-21 10:33 2011-12-17 Show GitHub Exploit DB Packet Storm
294897 - schneider-electric quantum_ethernet_module_140noe77101
quantum_ethernet_module_140noe77100
quantum_ethernet_module_140noe77111 		The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) generates the password for the fwupgrade account by performing… CWE-287
Improper Authentication 		CVE-2011-4860 2024-11-21 10:33 2011-12-17 Show GitHub Exploit DB Packet Storm
294898 - schneider-electric quantum_ethernet_module_140noe77101
quantum_ethernet_module_140cpu65260
quantum_ethernet_module_140cpu65160
quantum_ethernet_module_140noe77100
quantum_ethernet_module_140cpu65150
quan… 		The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB… NVD-CWE-Other
CVE-2011-4859 2024-11-21 10:33 2011-12-17 Show GitHub Exploit DB Packet Storm
294899 - nullsoft winamp Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-4857 2024-11-21 10:33 2011-12-17 Show GitHub Exploit DB Packet Storm
294900 - parallels parallels_plesk_panel The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leve… NVD-CWE-Other
CVE-2011-4856 2024-11-21 10:33 2011-12-16 Show GitHub Exploit DB Packet Storm