Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240231	4.3	警告	バラクーダネットワークス	-	Barracuda Link Balancer 330 ファームウェアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5114	2012-08-27 14:33	2012-08-23	Show	GitHub Exploit DB Packet Storm

240232	7.5	危険	Techdeluge	-	Joomla! 用 Techfolio コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5113	2012-08-27 14:32	2012-08-23	Show	GitHub Exploit DB Packet Storm

240233	7.5	危険	E. Wayne Madison	-	Joomla! 用 Alameda コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5112	2012-08-27 14:31	2011-11-9	Show	GitHub Exploit DB Packet Storm

240234	7.5	危険	kajianwebsite.org	-	Kajian Website CMS Balitbang における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5111	2012-08-27 14:31	2012-08-23	Show	GitHub Exploit DB Packet Storm

240235	7.5	危険	John Geo	-	Blogs Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5110	2012-08-27 14:30	2012-08-23	Show	GitHub Exploit DB Packet Storm

240236	7.5	危険	John Geo	-	Freelancer calendar における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5109	2012-08-27 14:29	2012-08-23	Show	GitHub Exploit DB Packet Storm

240237	4.3	警告	AdaptCMS	-	AdaptCMS の config.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5108	2012-08-27 14:29	2012-08-23	Show	GitHub Exploit DB Packet Storm

240238	4.3	警告	WordPress.org	-	WordPress 用 Alert Before Your Post プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5107	2012-08-27 14:28	2012-08-23	Show	GitHub Exploit DB Packet Storm

240239	4.3	警告	Fractalia	-	WordPress 用 Flexible Custom Post Type プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5106	2012-08-27 14:27	2012-08-23	Show	GitHub Exploit DB Packet Storm

240240	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService の EmployeeSearch.cc におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5105	2012-08-27 14:27	2012-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286371	-	microsoft	internet_explorer	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0297	2024-11-21 11:01	2014-03-12	Show	GitHub Exploit DB Packet Storm

286372	-	apple todd_miller	mac_os_x sudo	Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended co…	CWE-20 Improper Input Validation	CVE-2014-0106	2024-11-21 11:01	2014-03-12	Show	GitHub Exploit DB Packet Storm

286373	-	freedesktop canonical	udisks ubuntu_linux	Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0004	2024-11-21 11:01	2014-03-12	Show	GitHub Exploit DB Packet Storm

286374	-	linux	linux_kernel	The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause …	CWE-310 Cryptographic Issues	CVE-2014-0102	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

286375	-	linux	linux_kernel	Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly …	CWE-362 CWE-416 Race Condition Use After Free	CVE-2014-0100	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

286376	-	linux redhat canonical f5	linux_kernel enterprise_linux_server_aus enterprise_linux_server_tus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_eus ubuntu_lin…	The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call,…	CWE-476 NULL Pointer Dereference	CVE-2014-0101	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

286377	-	linux	linux_kernel	Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that…	CWE-120 Classic Buffer Overflow	CVE-2014-0049	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

286378	-	apache	struts	The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.	NVD-CWE-noinfo	CVE-2014-0094	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

286379	-	gnu	gnutls	lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attack…	CWE-310 Cryptographic Issues	CVE-2014-0092	2024-11-21 11:01	2014-03-7	Show	GitHub Exploit DB Packet Storm

286380	-	serena	dimensions_cm	Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that u…	CWE-352 Origin Validation Error	CVE-2014-0336	2024-11-21 11:01	2014-03-6	Show	GitHub Exploit DB Packet Storm