Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217541 9.3 危険 Tracker Software Products - Tracker Software PDF-XChange におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0729 2014-04-4 14:27 2013-01-21 Show GitHub Exploit DB Packet Storm
217542 6.5 警告 Postfix Admin Project - Postfix Admin の functions.inc.php の gen_show_status 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2655 2014-04-4 14:27 2014-02-19 Show GitHub Exploit DB Packet Storm
217543 4.3 警告 Splunk - Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2578 2014-04-4 12:15 2014-03-24 Show GitHub Exploit DB Packet Storm
217544 3.5 注意 OTRS プロジェクト - Open Ticket Request System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2553 2014-04-4 12:03 2014-04-1 Show GitHub Exploit DB Packet Storm
217545 6.8 警告 HitMyServer - WordPress 用 HMS Testimonials プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-4240 2014-04-4 11:19 2013-08-8 Show GitHub Exploit DB Packet Storm
217546 3.5 注意 IBM - IBM WebSphere Portal の IBM Connections 統合におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0901 2014-04-3 18:29 2014-03-31 Show GitHub Exploit DB Packet Storm
217547 4.3 警告 IBM - IBM WebSphere Portal の WCM UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0828 2014-04-3 18:29 2014-03-31 Show GitHub Exploit DB Packet Storm
217548 4.3 警告 シスコシステムズ - Cisco Security Manager の Web フレームワークにおける CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2138 2014-04-3 18:22 2014-04-1 Show GitHub Exploit DB Packet Storm
217549 4.3 警告 シスコシステムズ - Cisco Web セキュリティ アプライアンスの Web フレームワークにおける CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2137 2014-04-3 18:18 2014-04-1 Show GitHub Exploit DB Packet Storm
217550 4.3 警告 シスコシステムズ - Cisco Unity Connection の Web Inbox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2125 2014-04-3 18:17 2014-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296151 - igor_vlasenko html-template-pro Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to impr… CWE-79
Cross-site Scripting 		CVE-2011-4616 2024-11-21 10:32 2012-01-6 Show GitHub Exploit DB Packet Storm
296152 - openssl openssl The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of servi… CWE-399
 Resource Management Errors 		CVE-2011-4619 2024-11-21 10:32 2012-01-6 Show GitHub Exploit DB Packet Storm
296153 - openssl openssl OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate… CWE-399
 Resource Management Errors 		CVE-2011-4577 2024-11-21 10:32 2012-01-6 Show GitHub Exploit DB Packet Storm
296154 - openssl openssl The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive… CWE-310
Cryptographic Issues 		CVE-2011-4576 2024-11-21 10:32 2012-01-6 Show GitHub Exploit DB Packet Storm
296155 - pfsense pfsense etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certifica… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4197 2024-11-21 10:32 2012-01-4 Show GitHub Exploit DB Packet Storm
296156 - splunk splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPL-44614. CWE-79
Cross-site Scripting 		CVE-2011-4778 2024-11-21 10:32 2012-01-3 Show GitHub Exploit DB Packet Storm
296157 - splunk splunk Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote … CWE-287
Improper Authentication 		CVE-2011-4644 2024-11-21 10:32 2012-01-3 Show GitHub Exploit DB Packet Storm
296158 - splunk splunk Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP … CWE-22
Path Traversal 		CVE-2011-4643 2024-11-21 10:32 2012-01-3 Show GitHub Exploit DB Packet Storm
296159 - splunk splunk mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary… CWE-352
 Origin Validation Error 		CVE-2011-4642 2024-11-21 10:32 2012-01-3 Show GitHub Exploit DB Packet Storm
296160 - steve_j_baker plib Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors in… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-4620 2024-11-21 10:32 2011-12-31 Show GitHub Exploit DB Packet Storm