Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217841	4.3	警告	Schneider Electric	-	Schneider Electric ClearSCADA および SCADA Expert ClearSCADA の DNP3 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-6142	2014-01-20 11:12	2013-01-14	Show	GitHub Exploit DB Packet Storm

217842	7.5	危険	cspmum	-	CSP MySQL User Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-1466	2014-01-20 10:28	2013-01-8	Show	GitHub Exploit DB Packet Storm

217843	7.5	危険	Open Web Analytics	-	Open Web Analytics のパスワードリセットのページにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-1206	2014-01-20 10:16	2014-01-9	Show	GitHub Exploit DB Packet Storm

217844	10	危険	LOREX Technology	-	複数の Lorex Edge 製品のファームウェアの INetViewX ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-1201	2014-01-20 10:16	2014-01-9	Show	GitHub Exploit DB Packet Storm

217845	7.5	危険	WellinTech	-	複数の WellinTech 製品の ActiveX コントロールにおける任意の DLL コードをダウンロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2013-2827	2014-01-20 10:15	2014-01-14	Show	GitHub Exploit DB Packet Storm

217846	6.4	警告	WellinTech	-	複数の WellinTech 製品におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2826	2014-01-20 10:14	2014-01-14	Show	GitHub Exploit DB Packet Storm

217847	3.5	注意	VASCO	-	VASCO IDENTIKEY Authentication Server に認証不備の脆弱性	CWE-287 CWE-Other	CVE-2013-7292	2014-01-17 18:20	2014-01-9	Show	GitHub Exploit DB Packet Storm

217848	7.2	危険	サン・マイクロシステムズオラクル	-	Sun Solaris の dbm_open() および dbminit() 関数におけるバッファオーバーフローの脆弱性	-	CVE-2003-1067	2014-01-17 18:10	2003-06-19	Show	GitHub Exploit DB Packet Storm

217849	9.3	危険	オラクル	-	Oracle Java SE における Hotspot に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0408	2014-01-17 17:17	2014-01-14	Show	GitHub Exploit DB Packet Storm

217850	9.3	危険	オラクル	-	Oracle Java SE における Install に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0385	2014-01-17 17:17	2014-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295221	9.8	CRITICAL Network	fluxbb	fluxbb	A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled.	NVD-CWE-noinfo	CVE-2011-3621	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295222	9.8	CRITICAL Network	vanillaforums	vanilla	An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.	NVD-CWE-Other	CVE-2011-3614	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295223	7.5	HIGH Network	vanillaforums	vanilla	An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled.	CWE-200 Information Exposure	CVE-2011-3613	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295224	8.8	HIGH Network	usebb	usebb	Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.	CWE-352 Origin Validation Error	CVE-2011-3612	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295225	7.2	HIGH Network	usebb	usebb	A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.	CWE-20 Improper Input Validation	CVE-2011-3611	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295226	6.1	MEDIUM Network	s9y	serendipity_event_freetag	A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.	CWE-79 Cross-site Scripting	CVE-2011-3610	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295227	5.4	MEDIUM Network	joomla	joomla\!	Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters.	CWE-79 Cross-site Scripting	CVE-2011-3595	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295228	8.8	HIGH Network	anelectron	advanced_electron_forums	A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions.	CWE-352 Origin Validation Error	CVE-2011-3582	2024-11-21 10:30	2020-01-23	Show	GitHub Exploit DB Packet Storm

295229	4.7	MEDIUM Local	samba redhat	samba enterprise_linux	Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window whe…	CWE-362 Race Condition	CVE-2011-3585	2024-11-21 10:30	2020-01-1	Show	GitHub Exploit DB Packet Storm

295230	7.1	HIGH Local	hardlink_project redhat debian	hardlink enterprise_linux debian_linux	Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.	CWE-59 Link Following	CVE-2011-3632	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed