Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251421 6 警告 ヒューレット・パッカード - HP Virtual Server Environment における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-1724 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
251422 4.3 警告 Redmine - Redmine の app/views/layouts/base.rhtml におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1723 2012-03-27 18:43 2011-04-19 Show GitHub Exploit DB Packet Storm
251423 7.5 危険 Web-Empowered Church Team - TYPO3 の WEC Discussion Forum (wec_discussion) 拡張機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1722 2012-03-27 18:43 2011-04-7 Show GitHub Exploit DB Packet Storm
251424 4.3 警告 obspm - WebJaxe の php/partie_administrateur/administration.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1721 2012-03-27 18:43 2011-04-19 Show GitHub Exploit DB Packet Storm
251425 9.3 危険 CA Technologies - CA Output Management Web Viewer の Web Viewer ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1719 2012-03-27 18:43 2011-04-20 Show GitHub Exploit DB Packet Storm
251426 4.3 警告 CA Technologies - CA SiteMinder の Web Agents コンポーネントにおけるなりすまし攻撃の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1718 2012-03-27 18:43 2011-04-20 Show GitHub Exploit DB Packet Storm
251427 4.3 警告 Xymon - Xymon の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1716 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
251428 5 警告 qooxdoo
eyeOS Project		 - eyeOS などの製品で使用される QooxDoo におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1715 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
251429 4.3 警告 qooxdoo
eyeOS Project		 - eyeOS などの製品で使用される QooxDoo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1714 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
251430 4.3 警告 マイクロソフト - Windows 7 の Internet Explorer 8 で使用される Microsoft msxml.dll におけるヒープメモリアドレスに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-1713 2012-03-27 18:43 2011-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255621 6.7 MEDIUM
Local 		sitecore crm The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, v… NVD-CWE-noinfo
CVE-2017-5965 2024-11-21 12:28 2017-05-23 Show GitHub Exploit DB Packet Storm
255622 5.4 MEDIUM
Network 		vimbadmin vimbadmin Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) transport parameter to domain/add; the … CWE-79
Cross-site Scripting 		CVE-2017-5870 2024-11-21 12:28 2017-05-23 Show GitHub Exploit DB Packet Storm
255623 8.0 HIGH
Network 		apache archiva Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML… CWE-352
 Origin Validation Error 		CVE-2017-5657 2024-11-21 12:28 2017-05-23 Show GitHub Exploit DB Packet Storm
255624 8.8 HIGH
Network 		satel-iberia sennet_multitask_meter
sennet_optimal_datalogger
sennet_solar_datalogger 		A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, an… CWE-77
Command Injection 		CVE-2017-6048 2024-11-21 12:28 2017-05-19 Show GitHub Exploit DB Packet Storm
255625 9.8 CRITICAL
Network 		codesys web_server An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualizati… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2017-6027 2024-11-21 12:28 2017-05-19 Show GitHub Exploit DB Packet Storm
255626 9.8 CRITICAL
Network 		codesys web_server A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualizatio… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-6025 2024-11-21 12:28 2017-05-19 Show GitHub Exploit DB Packet Storm
255627 7.3 HIGH
Local 		leao_consultoria_e_desenvolvimento_de_sistemas ltda_me_laquis_scada An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions rel… NVD-CWE-noinfo
CVE-2017-6016 2024-11-21 12:28 2017-05-19 Show GitHub Exploit DB Packet Storm
255628 6.5 MEDIUM
Network 		apache ambari In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the ho… CWE-200
Information Exposure 		CVE-2017-5655 2024-11-21 12:28 2017-05-15 Show GitHub Exploit DB Packet Storm
255629 7.5 HIGH
Network 		apache ambari In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes. CWE-91
Blind XPath Injection 		CVE-2017-5654 2024-11-21 12:28 2017-05-13 Show GitHub Exploit DB Packet Storm
255630 5.9 MEDIUM
Network 		oneplus oxygenos An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade attacks. This is due to a lenient 'updater-script' in OTAs that does not check tha… CWE-20
 Improper Input Validation  		CVE-2017-5948 2024-11-21 12:28 2017-05-12 Show GitHub Exploit DB Packet Storm