Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251511 9.3 危険 IBM - IBM Tivoli Provisioning Manager Express におけるスタックベースのバッファオーバーフローの脆弱性 CWE-DesignError
CVE-2012-0198 2012-03-7 14:53 2012-03-6 Show GitHub Exploit DB Packet Storm
251512 4 警告 シックス・アパート株式会社 - Movable Type のデフォルト設定におけるディレクトリトラバーサル攻撃の脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1497 2012-03-6 15:22 2012-03-3 Show GitHub Exploit DB Packet Storm
251513 4.3 警告 シックス・アパート株式会社 - Movable Type の cgi-bin/mt/mt-wizard.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1262 2012-03-6 15:20 2012-03-3 Show GitHub Exploit DB Packet Storm
251514 4.3 警告 IBM - 複数の IBM 製品の Gantt applet viewer におけるクロスサイトスクリプティングの脆弱性 - CVE-2012-0715 2012-03-6 14:44 2012-03-2 Show GitHub Exploit DB Packet Storm
251515 7.8 危険 IBM - IBM AIX および VIOS におけるサービス運用妨害 (システムクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1385 2012-03-6 14:42 2012-02-24 Show GitHub Exploit DB Packet Storm
251516 7.5 危険 Novell - Novell GroupWise のクライアントにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4189 2012-03-6 14:42 2012-02-23 Show GitHub Exploit DB Packet Storm
251517 9.3 危険 IBM - IBM Personal Communications の pcsws.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0201 2012-03-5 15:26 2011-02-20 Show GitHub Exploit DB Packet Storm
251518 7.5 危険 アップル - Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3443 2012-03-5 15:26 2012-03-2 Show GitHub Exploit DB Packet Storm
251519 4.3 警告 ES APP Group - ES ファイルエクスプローラーにおけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0322 2012-03-5 12:02 2012-03-5 Show GitHub Exploit DB Packet Storm
251520 4.3 警告 Ulysses - WordPress 用 Black-LetterHead テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3865 2012-03-5 11:09 2011-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310331 6.1 MEDIUM
Network 		rollupjs rollup Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from `import.meta` (e.g… CWE-79
Cross-site Scripting 		CVE-2024-47068 2024-10-30 01:15 2024-09-24 Show GitHub Exploit DB Packet Storm
310332 4.8 MEDIUM
Network 		aftabhusain category_and_taxonomy_meta_fields The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image meta field value in the 'wpaft_add_meta_textinput' function in versions up to, an… CWE-79
Cross-site Scripting 		CVE-2024-9590 2024-10-30 01:07 2024-10-22 Show GitHub Exploit DB Packet Storm
310333 4.8 MEDIUM
Network 		aftabhusain category_and_taxonomy_meta_fields The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'new_meta_name' parameter in the 'wpaft_option_page' function in versions up to, and in… CWE-79
Cross-site Scripting 		CVE-2024-9589 2024-10-30 01:07 2024-10-22 Show GitHub Exploit DB Packet Storm
310334 4.8 MEDIUM
Network 		aftabhusain category_and_taxonomy_image The Category and Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_category_image' parameter in versions up to, and including, 1.0.0 due to insufficient input… CWE-79
Cross-site Scripting 		CVE-2024-9591 2024-10-30 01:04 2024-10-22 Show GitHub Exploit DB Packet Storm
310335 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN401 'stream_enc_regs' array is an array of dcn10_stream… CWE-129
 Improper Validation of Array Index 		CVE-2024-49970 2024-10-30 00:57 2024-10-22 Show GitHub Exploit DB Packet Storm
310336 9.1 CRITICAL
Network 		openrefine butterfly The OpenRefine fork of the MIT Simile Butterfly server is a modular web application framework. The Butterfly framework uses the `java.net.URL` class to refer to (what are expected to be) local resour… CWE-22
Path Traversal 		CVE-2024-47883 2024-10-30 00:38 2024-10-25 Show GitHub Exploit DB Packet Storm
310337 - - - HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this… - CVE-2024-30124 2024-10-30 00:35 2024-10-24 Show GitHub Exploit DB Packet Storm
310338 - - - An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an… - CVE-2024-42017 2024-10-30 00:35 2024-10-1 Show GitHub Exploit DB Packet Storm
310339 - sgi irix root privileges via buffer overflow in ordist command on SGI IRIX systems. NVD-CWE-Other
CVE-1999-0029 2024-10-30 00:35 1997-07-16 Show GitHub Exploit DB Packet Storm
310340 5.4 MEDIUM
Network 		hikashop hikashop A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious p… CWE-79
Cross-site Scripting 		CVE-2024-40746 2024-10-30 00:34 2024-10-22 Show GitHub Exploit DB Packet Storm