Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251531 4.3 警告 ThemeHybrid - WordPress 用 Hybrid テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3853 2012-03-5 11:04 2011-09-28 Show GitHub Exploit DB Packet Storm
251532 4.3 警告 Theme4Press - WordPress 用 EvoLve テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3852 2012-03-5 11:03 2011-09-28 Show GitHub Exploit DB Packet Storm
251533 4.3 警告 DevPress - WordPress 用 News テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3851 2012-03-5 11:03 2011-09-28 Show GitHub Exploit DB Packet Storm
251534 4.3 警告 Bytes For All - WordPress 用 Atahualpa テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3850 2012-03-5 11:02 2011-09-28 Show GitHub Exploit DB Packet Storm
251535 5.1 警告 Mozilla Foundation - Bugzilla の xmlrpc.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-0453 2012-03-2 15:18 2012-02-9 Show GitHub Exploit DB Packet Storm
251536 9.3 危険 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおける設定を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0371 2012-03-2 15:04 2012-02-29 Show GitHub Exploit DB Packet Storm
251537 7.8 危険 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0370 2012-03-2 15:03 2012-02-29 Show GitHub Exploit DB Packet Storm
251538 7.8 危険 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0369 2012-03-2 15:02 2012-02-29 Show GitHub Exploit DB Packet Storm
251539 7.8 危険 シスコシステムズ - Cisco Unity Connection におけるサービス運用妨害 (サービスクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0367 2012-03-2 14:25 2012-02-29 Show GitHub Exploit DB Packet Storm
251540 9 危険 シスコシステムズ - Cisco Unity Connection における管理者のパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0366 2012-03-2 14:25 2012-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253321 9.8 CRITICAL
Network 		smalruby smalruby-editor smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2017-2096 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
253322 4.3 MEDIUM
Network 		cybozu garoon Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors. NVD-CWE-noinfo
CVE-2017-2095 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
253323 4.3 MEDIUM
Network 		cybozu garoon Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors. CWE-269
 Improper Privilege Management 		CVE-2017-2094 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
253324 4.3 MEDIUM
Network 		cybozu garoon Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors. CWE-200
Information Exposure 		CVE-2017-2093 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
253325 5.4 MEDIUM
Network 		cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2017-2092 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
253326 4.3 MEDIUM
Network 		cybozu garoon Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors. NVD-CWE-noinfo
CVE-2017-2091 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
253327 6.5 MEDIUM
Network 		cubecart cubecart Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2017-2090 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
253328 7.1 HIGH
Network 		librdf
debian
fedoraproject 		raptor_rdf_syntax_library
debian_linux
fedora 		raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overfl… CWE-787
 Out-of-bounds Write 		CVE-2017-18926 2024-11-21 12:21 2020-11-7 Show GitHub Exploit DB Packet Storm
253329 5.5 MEDIUM
Local 		openr opentmpfiles opentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d entries are mishandled and allow a symlink attack. CWE-59
Link Following 		CVE-2017-18925 2024-11-21 12:21 2020-10-27 Show GitHub Exploit DB Packet Storm
253330 7.5 HIGH
Network 		oauth2-server_project oauth2-server oauth2-server (aka node-oauth2-server) through 3.1.1 implements OAuth 2.0 without PKCE. It does not prevent authorization code injection. This is similar to CVE-2020-7692. NOTE: the vendor states 'As… CWE-94
Code Injection 		CVE-2017-18924 2024-11-21 12:21 2020-10-4 Show GitHub Exploit DB Packet Storm