Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218271 4.3 警告 synetics - synetics i-doit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1237 2014-02-13 17:45 2014-01-15 Show GitHub Exploit DB Packet Storm
218272 4.3 警告 synetics - synetics i-doit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1413 2014-02-13 17:42 2013-01-5 Show GitHub Exploit DB Packet Storm
218273 6.8 警告 Extended Module Player Project - libxmp の loaders/masi_load.c 内の get_dsmp 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1980 2014-02-13 17:20 2013-04-20 Show GitHub Exploit DB Packet Storm
218274 6.5 警告 doorGets - doorGets CMS の dg-admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1459 2014-02-13 17:20 2014-01-15 Show GitHub Exploit DB Packet Storm
218275 4.3 警告 atmail pty ltd - Atmail Webmail Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6229 2014-02-13 17:02 2013-03-9 Show GitHub Exploit DB Packet Storm
218276 4.3 警告 MAXXmarketing GmbH - Joomla! 用 JoomShopping コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3933 2014-02-13 17:01 2013-08-15 Show GitHub Exploit DB Packet Storm
218277 7.5 危険 Exponent CMS project - Exponent CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3294 2014-02-13 17:01 2013-05-3 Show GitHub Exploit DB Packet Storm
218278 4.3 警告 CTERA Networks - CTERA Cloud Storage OS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2639 2014-02-13 17:00 2013-03-11 Show GitHub Exploit DB Packet Storm
218279 4.3 警告 マイクロソフト - Microsoft Internet Explorer 9 から 11 における別のドメインまたはゾーンからコンテンツを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-0293 2014-02-13 16:52 2014-02-11 Show GitHub Exploit DB Packet Storm
218280 9.3 危険 マイクロソフト - Microsoft Internet Explorer 11 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0290 2014-02-13 16:51 2014-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295031 - bestpractical rt Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic ci… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4459 2024-11-21 10:32 2012-06-5 Show GitHub Exploit DB Packet Storm
295032 - bestpractical rt Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via u… CWE-94
Code Injection 		CVE-2011-4458 2024-11-21 10:32 2012-06-5 Show GitHub Exploit DB Packet Storm
295033 5.5 MEDIUM
Local 		linux linux_kernel The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service (system hang) via an application that executes co… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2011-4621 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
295034 - linux linux_kernel Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhan… CWE-189
Numeric Errors 		CVE-2011-4611 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
295035 5.5 MEDIUM
Local 		linux linux_kernel The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an inc… CWE-476
 NULL Pointer Dereference 		CVE-2011-4594 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
295036 - linux
avaya 		linux_kernel
96x1_ip_deskphone_firmware 		The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial … CWE-399
 Resource Management Errors 		CVE-2011-4326 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
295037 - cisco ciscoworks_common_services CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary H… CWE-94
Code Injection 		CVE-2011-4237 2024-11-21 10:32 2012-05-3 Show GitHub Exploit DB Packet Storm
295038 - cisco unified_meetingplace The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate direc… CWE-200
Information Exposure 		CVE-2011-4232 2024-11-21 10:32 2012-05-3 Show GitHub Exploit DB Packet Storm
295039 - cisco ios
ios_xe 		Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device c… CWE-20
 Improper Input Validation  		CVE-2011-4231 2024-11-21 10:32 2012-05-3 Show GitHub Exploit DB Packet Storm
295040 - scadatec
craig_peterson 		modbustagserver
turbopower_abbrevia
scadaphone 		Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers t… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-4535 2024-11-21 10:32 2012-04-3 Show GitHub Exploit DB Packet Storm