Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218071	2.1	注意	マイクロソフトシマンテック IBM オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における脆弱性	CWE-noinfo 情報不足	CVE-2012-3109	2014-02-25 17:48	2012-07-17	Show	GitHub Exploit DB Packet Storm

218072	10	危険	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey の Web ワーカーの実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2014-1488	2014-02-25 17:42	2014-02-4	Show	GitHub Exploit DB Packet Storm

218073	5	警告	Mozilla Foundation	-	複数の Mozilla 製品の Web ワーカーの実装における同一生成元ポリシーを回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-1487	2014-02-25 17:41	2014-02-4	Show	GitHub Exploit DB Packet Storm

218074	10	危険	Mozilla Foundation	-	複数の Mozilla 製品の imgRequestProxy 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2014-1486	2014-02-25 17:41	2014-02-4	Show	GitHub Exploit DB Packet Storm

218075	7.5	危険	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey の Content Security Policy の実装における任意の XSLT コードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2014-1485	2014-02-25 17:40	2014-02-4	Show	GitHub Exploit DB Packet Storm

218076	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性	CWE-200 情報漏えい	CVE-2014-1483	2014-02-25 17:40	2014-02-4	Show	GitHub Exploit DB Packet Storm

218077	10	危険	Mozilla Foundation	-	複数の Mozilla 製品の RasterImage.cpp における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1482	2014-02-25 17:40	2014-02-4	Show	GitHub Exploit DB Packet Storm

218078	5	警告	Mozilla Foundation	-	複数の Mozilla 製品における window オブジェクトの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1481	2014-02-25 17:39	2014-02-4	Show	GitHub Exploit DB Packet Storm

218079	5	警告	Mozilla Foundation	-	複数の Mozilla 製品の System Only Wrapper の実装における制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1479	2014-02-25 17:39	2014-02-4	Show	GitHub Exploit DB Packet Storm

218080	10	危険	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-1478	2014-02-25 17:38	2014-02-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295151	-	ibc.co.jp	iwate_portal_bar	Cross-site scripting (XSS) vulnerability in the RSS/Atom feed-reader implementation in Iwate Portal Bar allows remote attackers to inject arbitrary web script or HTML via a crafted feed.	CWE-79 Cross-site Scripting	CVE-2011-3999	2024-11-21 10:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

295152	-	apple	webobjects	Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2011-3998	2024-11-21 10:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

295153	-	opengear	opengear_console_server_firmware acm5000_console_server cm4000_console_server im4004-5_console_server im4200_console_server img4000_console_server kcs6000_rackside_console_server	Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.	CWE-287 Improper Authentication	CVE-2011-3997	2024-11-21 10:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

295154	-	nara_institute_of_science_and_technology	chasen	Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-4000	2024-11-21 10:31	2011-11-9	Show	GitHub Exploit DB Packet Storm

295155	-	sir	gnuboard	SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.	CWE-89 SQL Injection	CVE-2011-4066	2024-11-21 10:31	2011-11-5	Show	GitHub Exploit DB Packet Storm

295156	-	ffftp	ffftp	Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions.	NVD-CWE-Other	CVE-2011-3991	2024-11-21 10:31	2011-11-5	Show	GitHub Exploit DB Packet Storm

295157	-	hiroyuki_oyama	dbd\	SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2011-3989	2024-11-21 10:31	2011-11-5	Show	GitHub Exploit DB Packet Storm

295158	-	controlsystemworks	csworks	The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.	CWE-399 Resource Management Errors	CVE-2011-3996	2024-11-21 10:31	2011-11-4	Show	GitHub Exploit DB Packet Storm

295159	-	skyarc	mtcms multifileuploader autotagging mailpack duplicateentry	Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0…	CWE-352 Origin Validation Error	CVE-2011-3994	2024-11-21 10:31	2011-11-4	Show	GitHub Exploit DB Packet Storm

295160	-	skyarc	mtcms multifileuploader autotagging mailpack duplicateentry	SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-3993	2024-11-21 10:31	2011-11-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed