Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250741 7.2 危険 securstar - SecurStar DriveCrypt の DCR.sys ドライバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0513 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250742 6.8 警告 jikaka - Teams Structure モジュールの team.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0512 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250743 7.5 危険 joomtraders - Joomla! の com_allcinevid コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0511 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250744 7.5 危険 awbs - AWBS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0510 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250745 4.3 警告 vaadin - Vaadin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0509 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250746 4.3 警告 Contao - Contao CMS の system/modules/comments/Comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0508 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250747 4.3 警告 blackmoonftpserver - Blackmoon FTP の FTPService.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-0507 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250748 6.8 警告 tsixm - AxDCMS の modules/profile/user.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0506 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250749 5.1 警告 remi jean - Zwii の system/system.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0505 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250750 4.3 警告 vamshop - VaM Shop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0504 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305271 6.1 MEDIUM
Network
phpshop phpshop PHPShop through 0.8.1 has XSS. CWE-79
Cross-site Scripting
CVE-2011-1069 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
305272 6.1 MEDIUM
Network
vanillaforums vanilla Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. CWE-79
Cross-site Scripting
CVE-2011-1009 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
305273 9.8 CRITICAL
Network
smarty
debian
smarty
debian_linux
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. CWE-20
 Improper Input Validation 
CVE-2011-1028 2024-11-21 10:25 2019-11-21 Show GitHub Exploit DB Packet Storm
305274 7.8 HIGH
Local
unixodbc
debian
opensuse
redhat
unixodbc
debian_linux
opensuse
enterprise_linux
The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string. CWE-120
Classic Buffer Overflow
CVE-2011-1145 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
305275 4.7 MEDIUM
Local
tesseract_project
debian
tesseract
debian_linux
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file. CWE-59
Link Following
CVE-2011-1136 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
305276 7.8 HIGH
Local
v86d_project
debian
v86d
debian_linux
v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences. CWE-863
 Incorrect Authorization
CVE-2011-1070 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
305277 6.1 MEDIUM
Network
s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/Imag… CWE-79
Cross-site Scripting
CVE-2011-1135 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm
305278 9.8 CRITICAL
Network
s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2011-1134 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm
305279 6.1 MEDIUM
Network
s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php. CWE-79
Cross-site Scripting
CVE-2011-1133 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm
305280 - novell suse_lifecycle_management_server SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-0993 2024-11-21 10:25 2014-04-17 Show GitHub Exploit DB Packet Storm