Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240231 4.3 警告 バラクーダネットワークス - Barracuda Link Balancer 330 ファームウェア におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5114 2012-08-27 14:33 2012-08-23 Show GitHub Exploit DB Packet Storm
240232 7.5 危険 Techdeluge - Joomla! 用 Techfolio コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5113 2012-08-27 14:32 2012-08-23 Show GitHub Exploit DB Packet Storm
240233 7.5 危険 E. Wayne Madison - Joomla! 用 Alameda コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5112 2012-08-27 14:31 2011-11-9 Show GitHub Exploit DB Packet Storm
240234 7.5 危険 kajianwebsite.org - Kajian Website CMS Balitbang における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5111 2012-08-27 14:31 2012-08-23 Show GitHub Exploit DB Packet Storm
240235 7.5 危険 John Geo - Blogs Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5110 2012-08-27 14:30 2012-08-23 Show GitHub Exploit DB Packet Storm
240236 7.5 危険 John Geo - Freelancer calendar における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5109 2012-08-27 14:29 2012-08-23 Show GitHub Exploit DB Packet Storm
240237 4.3 警告 AdaptCMS - AdaptCMS の config.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5108 2012-08-27 14:29 2012-08-23 Show GitHub Exploit DB Packet Storm
240238 4.3 警告 WordPress.org - WordPress 用 Alert Before Your Post プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5107 2012-08-27 14:28 2012-08-23 Show GitHub Exploit DB Packet Storm
240239 4.3 警告 Fractalia - WordPress 用 Flexible Custom Post Type プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5106 2012-08-27 14:27 2012-08-23 Show GitHub Exploit DB Packet Storm
240240 4.3 警告 Zoho Corporation - ZOHO ManageEngine ADSelfService の EmployeeSearch.cc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5105 2012-08-27 14:27 2012-08-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286061 7.5 HIGH
Network 		convert\
fedoraproject 		\
fedora 		perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2013-7488 2024-11-21 11:01 2020-04-8 Show GitHub Exploit DB Packet Storm
286062 9.8 CRITICAL
Network 		swann dvr04b_firmware
dvr08b_firmware
dvr-16cif_firmware
dvr16b_firmware 		On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000. CWE-74
Injection 		CVE-2013-7487 2024-11-21 11:01 2020-03-21 Show GitHub Exploit DB Packet Storm
286063 9.8 CRITICAL
Network 		redhat openshift The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing t… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2014-0234 2024-11-21 11:01 2020-02-12 Show GitHub Exploit DB Packet Storm
286064 5.9 MEDIUM
Network 		redhat jboss_portal It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where S… CWE-362
Race Condition 		CVE-2014-0245 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
286065 6.1 MEDIUM
Network 		redhat subscription_asset_manager Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering. CWE-79
Cross-site Scripting 		CVE-2014-0183 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
286066 6.5 MEDIUM
Network 		redhat jboss_enterprise_application_platform In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could allow an authenticated user in one application to acc… CWE-863
 Incorrect Authorization 		CVE-2014-0169 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
286067 9.8 CRITICAL
Network 		tigervnc tigervnc Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vn… CWE-787
 Out-of-bounds Write 		CVE-2014-0011 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
286068 6.1 MEDIUM
Network 		open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-7486 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
286069 6.1 MEDIUM
Network 		open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-7485 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
286070 5.9 MEDIUM
Network 		ovirt-engine-sdk-python_project ovirt-engine-sdk-python ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a T… CWE-295
Improper Certificate Validation  		CVE-2014-0161 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm