Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217961 5 警告 SAP - SAP NetWeaver の Portal WebDynPro における重要なパス情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2014-1961 2014-02-19 13:50 2014-01-25 Show GitHub Exploit DB Packet Storm
217962 5 警告 SAP - SAP NetWeaver の Solution Manager における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1960 2014-02-19 13:49 2014-01-25 Show GitHub Exploit DB Packet Storm
217963 5.8 警告 Ryan O'Hara - Piranha の Piranha Configuration Tool における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6492 2014-02-19 13:36 2013-12-13 Show GitHub Exploit DB Packet Storm
217964 7.2 危険 Linux Containers - LXC の lxc-sshd テンプレートにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6441 2014-02-19 12:18 2013-12-18 Show GitHub Exploit DB Packet Storm
217965 4.3 警告 Django Software Foundation - Django の utils/http.py 内の is_safe_url 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6044 2014-02-18 18:16 2013-08-13 Show GitHub Exploit DB Packet Storm
217966 5 警告 IBM
オラクル
- Oracle Java SE および Java SE Embedded における JAXP に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5851 2014-02-18 18:14 2013-10-15 Show GitHub Exploit DB Packet Storm
217967 4 警告 Linux - Linux Kernel の virt/kvm/kvm_main.c の __kvm_set_memory_region 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4592 2014-02-18 18:13 2013-11-18 Show GitHub Exploit DB Packet Storm
217968 4.3 警告 レッドハット - Red Hat JBoss Fuse および JBoss A-MQ におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4372 2014-02-18 18:03 2013-09-26 Show GitHub Exploit DB Packet Storm
217969 1.5 注意 Xen プロジェクト - Xen におけるハイパーバイザのスタックメモリを取得される脆弱性 CWE-200
情報漏えい
CVE-2013-4355 2014-02-18 17:53 2013-09-30 Show GitHub Exploit DB Packet Storm
217970 5.8 警告 Linux
Fedora Project
レッドハット
- Linux Kernel の crypto/ansi_cprng.c の get_prng_bytes 関数における暗号保護メカニズムを破られる脆弱性 CWE-189
数値処理の問題
CVE-2013-4345 2014-02-18 17:48 2013-09-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295211 - adaptcms adaptcms AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/poll_v… CWE-200
Information Exposure
CVE-2011-3698 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295212 - achievo achievo Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/graph/jp… CWE-200
Information Exposure
CVE-2011-3697 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295213 - 60cyclecms_project 60cyclecms 60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by post.php and … CWE-200
Information Exposure
CVE-2011-3696 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295214 - 111webcalendar 111webcalendar 111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by footer.ph… CWE-200
Information Exposure
CVE-2011-3695 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295215 6.1 MEDIUM
Network
mozilla firefox Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-d… CWE-79
Cross-site Scripting
CVE-2011-3656 2024-11-21 10:30 2021-06-3 Show GitHub Exploit DB Packet Storm
295216 7.5 HIGH
Network
lexmark x950_firmware
x952_firmware
x954_firmware
x940e_firmware
x945e_firmware
x925de_firmware
x860_firmware
x862_firmware
x864_firmware
x850_firmware
x852_firmware
x854_fir…
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut. CWE-200
Information Exposure
CVE-2011-3269 2024-11-21 10:30 2020-03-10 Show GitHub Exploit DB Packet Storm
295217 7.5 HIGH
Network
freebsd
apple
openbsd
php
freebsd
mac_os_x
openbsd
php
regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion. CWE-400
 Uncontrolled Resource Consumption
CVE-2011-3336 2024-11-21 10:30 2020-02-13 Show GitHub Exploit DB Packet Storm
295218 9.6 CRITICAL
Network
flowplayer flowplayer_flash Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting
CVE-2011-3642 2024-11-21 10:30 2020-02-9 Show GitHub Exploit DB Packet Storm
295219 7.5 HIGH
Network
joomla joomla\! Joomla! core 1.7.1 allows information disclosure due to weak encryption CWE-326
Inadequate Encryption Strength
CVE-2011-3629 2024-11-21 10:30 2020-02-4 Show GitHub Exploit DB Packet Storm
295220 6.1 MEDIUM
Network
phorum phorum A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18. CWE-79
Cross-site Scripting
CVE-2011-3622 2024-11-21 10:30 2020-01-23 Show GitHub Exploit DB Packet Storm