Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251311	7.5	危険	Best Practical Solutions	-	Best Practical Solutions RT における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5092	2012-06-6 14:16	2012-06-4	Show	GitHub Exploit DB Packet Storm

251312	6.5	警告	Best Practical Solutions	-	Best Practical Solutions RT における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4460	2012-06-6 14:14	2012-06-4	Show	GitHub Exploit DB Packet Storm

251313	3.5	注意	Best Practical Solutions	-	Best Practical Solutions RT におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4459	2012-06-6 14:14	2012-06-4	Show	GitHub Exploit DB Packet Storm

251314	6.8	警告	Best Practical Solutions	-	Best Practical Solutions RT における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4458	2012-06-6 14:12	2012-06-4	Show	GitHub Exploit DB Packet Storm

251315	6.8	警告	Best Practical Solutions	-	Best Practical Solutions RT におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-2085	2012-06-6 14:10	2012-06-4	Show	GitHub Exploit DB Packet Storm

251316	4	警告	Best Practical Solutions	-	Best Practical Solutions RT における過去のパスワードハッシュを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-2084	2012-06-6 14:09	2012-06-4	Show	GitHub Exploit DB Packet Storm

251317	4.3	警告	Best Practical Solutions	-	Best Practical Solutions RT におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2083	2012-06-6 14:07	2012-06-4	Show	GitHub Exploit DB Packet Storm

251318	5	警告	Best Practical Solutions	-	Best Practical Solutions RT における平文パスワードを検出される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-2082	2012-06-6 14:05	2012-06-4	Show	GitHub Exploit DB Packet Storm

251319	5	警告	インターネットイニシアティブ	-	SEIL シリーズにおけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2632	2012-06-6 12:01	2012-06-6	Show	GitHub Exploit DB Packet Storm

251320	5	警告	WassUp	-	WordPress 用プラグイン WassUp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2633	2012-06-6 12:00	2012-06-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265301	7.5	HIGH Network	libav	libav	There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input.	NVD-CWE-noinfo	CVE-2017-11684	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265302	6.5	MEDIUM Network	exiv2 canonical debian	exiv2 ubuntu_linux debian_linux	There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.	CWE-617 Reachable Assertion	CVE-2017-11683	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265303	6.1	MEDIUM Network	hashtopolis	hashtopolis	Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php.	CWE-79 Cross-site Scripting	CVE-2017-11682	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265304	8.8	HIGH Network	project_hashtopussy	hashtopussy	Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=c…	CWE-269 Improper Privilege Management	CVE-2017-11681	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265305	8.8	HIGH Network	project_hashtopussy	hashtopussy	Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.	CWE-352 Origin Validation Error	CVE-2017-11680	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265306	8.8	HIGH Network	hashtopus_project	hashtopus	Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.	CWE-352 Origin Validation Error	CVE-2017-11679	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265307	8.8	HIGH Network	hashtopus_project	hashtopus	SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.	CWE-89 SQL Injection	CVE-2017-11678	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265308	6.1	MEDIUM Network	hashtopus_project	hashtopus	Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query string to admin.php.	CWE-79 Cross-site Scripting	CVE-2017-11677	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265309	8.8	HIGH Network	zen-cart	zen_cart	The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP …	CWE-94 Code Injection	CVE-2017-11675	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

265310	5.5	MEDIUM Local	acunetix	web_vulnerability_scanner	Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a "Read Access Violation starting at reporter!madTraceProcess."	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11674	2024-11-21 12:08	2017-07-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed