Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251661 4.3 警告 MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3358 2011-09-27 11:18 2011-09-21 Show GitHub Exploit DB Packet Storm
251662 6.8 警告 MantisBT Group - MantisBT の bug_actiongroup_ext_page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-3357 2011-09-27 11:17 2011-08-31 Show GitHub Exploit DB Packet Storm
251663 4.3 警告 MantisBT Group - MantisBT の filter_api.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2938 2011-09-27 11:15 2011-08-18 Show GitHub Exploit DB Packet Storm
251664 4.3 警告 MantisBT Group - MantisBT の config_defaults_inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3356 2011-09-27 11:12 2011-07-31 Show GitHub Exploit DB Packet Storm
251665 10 危険 シスコシステムズ - Cisco Identity Services Engine における設定を変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-3290 2011-09-27 11:07 2011-09-20 Show GitHub Exploit DB Packet Storm
251666 4.3 警告 Roundcube.net - Roundcube Webmail の UI メッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2937 2011-09-27 11:05 2011-08-9 Show GitHub Exploit DB Packet Storm
251667 6.8 警告 AmmSoft - AmmSoft ScriptFTP にバッファオーバーフローの脆弱性 - CVE-2011-3976 2011-09-27 10:58 2011-09-21 Show GitHub Exploit DB Packet Storm
251668 10 危険 Measuresoft Development Ltd. - Measuresoft ScadaPro の service.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3490 2011-09-26 15:59 2011-09-16 Show GitHub Exploit DB Packet Storm
251669 4.6 警告 レッドハット - Red Hat Enterprise MRG の Cumin における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-2925 2011-09-26 15:43 2011-09-7 Show GitHub Exploit DB Packet Storm
251670 5 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の encryptPassword 関数における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-1509 2011-09-26 15:42 2011-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277681 6.1 MEDIUM
Network
videowhisper webcam Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples/special_textscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers to inject arbitrary w… CWE-79
Cross-site Scripting
CVE-2014-8338 2024-11-21 11:18 2020-02-1 Show GitHub Exploit DB Packet Storm
277682 9.8 CRITICAL
Network
aircrack-ng aircrack-ng Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbitrary code via a crafted length parameter value. CWE-787
 Out-of-bounds Write
CVE-2014-8322 2024-11-21 11:18 2020-02-1 Show GitHub Exploit DB Packet Storm
277683 7.8 HIGH
Local
aircrack-ng aircrack-ng Stack-based buffer overflow in the gps_tracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local users to execute arbitrary code or gain privileges via unspecified vectors. CWE-787
 Out-of-bounds Write
CVE-2014-8321 2024-11-21 11:18 2020-02-1 Show GitHub Exploit DB Packet Storm
277684 7.8 HIGH
Local
unzip_project
redhat
unzip
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_server_tus
Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the u… CWE-787
 Out-of-bounds Write
CVE-2014-8140 2024-11-21 11:18 2020-02-1 Show GitHub Exploit DB Packet Storm
277685 7.8 HIGH
Local
unzip_project
redhat
unzip
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_server_tus
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip… CWE-787
 Out-of-bounds Write
CVE-2014-8139 2024-11-21 11:18 2020-02-1 Show GitHub Exploit DB Packet Storm
277686 8.8 HIGH
Network
wisc htcondor The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code. CWE-20
 Improper Input Validation 
CVE-2014-8126 2024-11-21 11:18 2020-02-1 Show GitHub Exploit DB Packet Storm
277687 4.3 MEDIUM
Network
postgresql
debian
postgresql
debian_linux
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constr… CWE-209
Information Exposure Through an Error Message
CVE-2014-8161 2024-11-21 11:18 2020-01-28 Show GitHub Exploit DB Packet Storm
277688 7.8 HIGH
Local
redhat
debian
bsd_mailx_project
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_server_tus
debian_linux
bsd…
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address. CWE-74
Injection
CVE-2014-7844 2024-11-21 11:18 2020-01-15 Show GitHub Exploit DB Packet Storm
277689 9.8 CRITICAL
Network
helpdezk helpdezk Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an e… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2014-8337 2024-11-21 11:18 2020-01-4 Show GitHub Exploit DB Packet Storm
277690 7.5 HIGH
Network
openldap
debian
openldap
debian_linux
An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with cra… CWE-193
 Off-by-one Error
CVE-2014-8182 2024-11-21 11:18 2020-01-3 Show GitHub Exploit DB Packet Storm