Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217331 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の mozilla::dom::TextTrack::AddCue 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1525 2014-05-1 19:12 2014-04-29 Show GitHub Exploit DB Packet Storm
217332 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の Web Audio サブシステムの mozilla::dom::OscillatorNodeEngine::ComputeCustom 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1522 2014-05-1 18:38 2014-04-29 Show GitHub Exploit DB Packet Storm
217333 6.9 警告 Mozilla Foundation - Windows 上で稼働する Mozilla Firefox の Maintenance Service Installer の maintenservice_installer.exe における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1520 2014-05-1 18:35 2014-04-29 Show GitHub Exploit DB Packet Storm
217334 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-1519 2014-05-1 18:29 2014-04-29 Show GitHub Exploit DB Packet Storm
217335 4.3 警告 Digital Junkies - dompdf の dompdf.php における chroot の保護を回避される脆弱性 CWE-200
情報漏えい
CVE-2014-2383 2014-05-1 18:18 2014-03-11 Show GitHub Exploit DB Packet Storm
217336 4.3 警告 VideoWhisper.com - Drupal 用 VideoWhisper Webcam プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2715 2014-05-1 18:10 2014-04-25 Show GitHub Exploit DB Packet Storm
217337 6.8 警告 Ubercart - Drupal 用 Ubercart モジュールにおける Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2013-7302 2014-05-1 18:09 2013-12-17 Show GitHub Exploit DB Packet Storm
217338 4.3 警告 Gizra - Drupal 用 Entity reference モジュールにおけるプライベートノードのタイトルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-7066 2014-05-1 18:08 2013-11-20 Show GitHub Exploit DB Packet Storm
217339 4.9 警告 Gizra - Drupal 用 Organic Groups モジュールにおけるノード上のグループの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-7068 2014-05-1 18:07 2013-11-20 Show GitHub Exploit DB Packet Storm
217340 5.8 警告 Gizra - Drupal 用 Organic Groups モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-7065 2014-05-1 18:07 2013-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296121 - vandyke absoluteftp Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-5164 2024-11-21 10:33 2012-09-16 Show GitHub Exploit DB Packet Storm
296122 - schneider-electric
mitsubishi-automation
citectscada
mx4_scada
Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users to execute arbitrary… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-5163 2024-11-21 10:33 2012-09-16 Show GitHub Exploit DB Packet Storm
296123 - gomlab gom_player Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists b… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-5162 2024-11-21 10:33 2012-09-16 Show GitHub Exploit DB Packet Storm
296124 - open-emr openemr Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension foll… NVD-CWE-Other
CVE-2011-5161 2024-11-21 10:33 2012-09-10 Show GitHub Exploit DB Packet Storm
296125 - open-emr openemr Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter. CWE-79
Cross-site Scripting
CVE-2011-5160 2024-11-21 10:33 2012-09-10 Show GitHub Exploit DB Packet Storm
296126 - geeklog geeklog Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group parameter, a different … CWE-79
Cross-site Scripting
CVE-2011-5159 2024-11-21 10:33 2012-09-10 Show GitHub Exploit DB Packet Storm
296127 - geeklog geeklog Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the (1) subgroup or (2) con… CWE-79
Cross-site Scripting
CVE-2011-4942 2024-11-21 10:33 2012-09-10 Show GitHub Exploit DB Packet Storm
296128 - datev grundpaket_basis Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse (1) … CWE-426
 Untrusted Search Path
CVE-2011-5158 2024-11-21 10:33 2012-09-7 Show GitHub Exploit DB Packet Storm
296129 - attachmate reflection_for_unix_and_openvms
reflection_for_hp
reflection_x
reflection_for_regis_graphics_server
reflection_for_ibm
Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011… NVD-CWE-Other
CVE-2011-5157 2024-11-21 10:33 2012-09-6 Show GitHub Exploit DB Packet Storm
296130 - sowsoft effective_file_search Untrusted search path vulnerability in Effective File Search 6.7 allows local users to gain privileges via a Trojan horse ztvunrar36.dll file in the current working directory, as demonstrated by a di… NVD-CWE-Other
CVE-2011-5156 2024-11-21 10:33 2012-09-6 Show GitHub Exploit DB Packet Storm