Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251041	6.8	警告	Andy's PHP Knowledgebase Project	-	Aphpkb の plugins/pdfClasses/pdfgen.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1556	2012-03-27 18:43	2011-04-4	Show	GitHub Exploit DB Packet Storm

251042	6.8	警告	Andy's PHP Knowledgebase Project	-	Aphpkb のsa.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1555	2012-03-27 18:43	2011-03-16	Show	GitHub Exploit DB Packet Storm

251043	4.3	警告	foolabs T1lib	-	Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2011-1554	2012-03-27 18:43	2011-03-31	Show	GitHub Exploit DB Packet Storm

251044	4.3	警告	foolabs T1lib	-	Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1553	2012-03-27 18:43	2011-03-31	Show	GitHub Exploit DB Packet Storm

251045	4.3	警告	foolabs T1lib	-	Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-1552	2012-03-27 18:43	2011-03-31	Show	GitHub Exploit DB Packet Storm

251046	6.9	警告	Novell	-	SUSE openSUSE Factory における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1551	2012-03-27 18:43	2011-03-30	Show	GitHub Exploit DB Packet Storm

251047	6.3	警告	Gentoo Linux	-	logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1550	2012-03-27 18:43	2011-03-30	Show	GitHub Exploit DB Packet Storm

251048	6.3	警告	Gentoo Linux	-	logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1549	2012-03-27 18:43	2011-03-30	Show	GitHub Exploit DB Packet Storm

251049	3.5	注意	Liferay Apache Software Foundation	-	Liferay Portal CE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1570	2012-03-27 18:43	2010-09-13	Show	GitHub Exploit DB Packet Storm

251050	6.3	警告	Gentoo Linux	-	logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1548	2012-03-27 18:43	2011-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248531	8.8	HIGH Network	videolan	vlc_media_player	The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possi…	CWE-416 Use After Free	CVE-2018-11516	2024-11-21 12:43	2018-05-29	Show	GitHub Exploit DB Packet Storm

248532	5.4	MEDIUM Network	moderator_log_notes_project	moderator_log_notes	An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. The XSS is located in the mod notes textarea.	CWE-79 Cross-site Scripting	CVE-2018-11430	2024-11-21 12:43	2018-05-29	Show	GitHub Exploit DB Packet Storm

248533	9.8	CRITICAL Network	membermouse	membermouse	Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL database via an applyCoupon action in an admi…	CWE-89 SQL Injection	CVE-2018-11309	2024-11-21 12:43	2018-05-29	Show	GitHub Exploit DB Packet Storm

248534	9.8	CRITICAL Network	gvectors	wpforo	The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.	CWE-89 SQL Injection	CVE-2018-11515	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

248535	8.8	HIGH Network	naukri_clone_script_project	naukri_clone_script	PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_resume_det.php, as demonstrated by changing .docx to .php.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-11514	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

248536	4.8	MEDIUM Network	creatiwity	witycms	Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbit…	CWE-79 Cross-site Scripting	CVE-2018-11512	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

248537	5.5	MEDIUM Local	linux canonical	linux_kernel ubuntu_linux	The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.	CWE-200 Information Exposure	CVE-2018-11508	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

248538	6.5	MEDIUM Network	flif	flif	An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm in image/image-pnm.cpp.	CWE-834 Excessive Iteration	CVE-2018-11507	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

248539	7.8	HIGH Local	linux canonical debian	linux_kernel ubuntu_linux debian_linux	The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified othe…	CWE-787 Out-of-bounds Write	CVE-2018-11506	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

248540	7.5	HIGH Network	werewolf_online_project	werewolf_online	The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.	CWE-200 Information Exposure	CVE-2018-11505	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed