Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 2:06 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250911	6.8	警告	jikaka	-	Teams Structure モジュールの team.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0512	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250912	7.5	危険	joomtraders	-	Joomla! の com_allcinevid コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0511	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250913	7.5	危険	awbs	-	AWBS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0510	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250914	4.3	警告	vaadin	-	Vaadin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0509	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250915	4.3	警告	Contao	-	Contao CMS の system/modules/comments/Comments.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0508	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250916	4.3	警告	blackmoonftpserver	-	Blackmoon FTP の FTPService.exe におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0507	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250917	6.8	警告	tsixm	-	AxDCMS の modules/profile/user.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0506	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250918	5.1	警告	remi jean	-	Zwii の system/system.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0505	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250919	4.3	警告	vamshop	-	VaM Shop におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0504	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250920	6.8	警告	vamshop	-	VaM Shop におけるクロスサイトフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0503	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248281	6.1	MEDIUM Network	halo	halo	ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.	CWE-79 Cross-site Scripting	CVE-2018-11011	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248282	8.8	HIGH Network	sdcms	sdcms	An issue was discovered in SDcms v1.5. Cross-site request forgery (CSRF) vulnerability in /WWW//app/admin/controller/admincontroller.php allows remote attackers to add administrator accounts via m=ad…	CWE-352 Origin Validation Error	CVE-2018-11004	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248283	6.5	MEDIUM Network	yxcms	yxcms	An issue was discovered in YXcms 1.4.7. Cross-site request forgery (CSRF) vulnerability in protected/apps/admin/controller/adminController.php allows remote attackers to delete administrator accounts…	CWE-352 Origin Validation Error	CVE-2018-11003	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248284	6.5	MEDIUM Network	exiv2 debian canonical	exiv2 debian_linux ubuntu_linux	An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.	CWE-125 Out-of-bounds Read	CVE-2018-10999	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248285	6.5	MEDIUM Network	exiv2 canonical debian redhat	exiv2 ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server	An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call.	NVD-CWE-noinfo	CVE-2018-10998	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248286	9.8	CRITICAL Network	d-link	dir-629-b_firmware	The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a session.cgi?ACTION=logout requ…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-10996	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248287	9.8	CRITICAL Network	lilypond	lilypond	lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-inje…	CWE-88 Argument Injection	CVE-2018-10992	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248288	5.5	MEDIUM Local	modbuspal_project	modbuspal	ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE inje…	CWE-611 XXE	CVE-2018-10832	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

248289	8.8	HIGH Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain h…	NVD-CWE-noinfo	CVE-2018-10982	2024-11-21 12:42	2018-05-11	Show	GitHub Exploit DB Packet Storm

248290	6.5	MEDIUM Local	debian xen	debian_linux xen	An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid tra…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-10981	2024-11-21 12:42	2018-05-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed