Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251711 9.3 危険 アドビシステムズ
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2424 2011-08-30 09:50 2011-08-9 Show GitHub Exploit DB Packet Storm
251712 10 危険 サイバートラスト株式会社
オラクル
- net-snmp の fixproc コマンドにおける不適切な一時ファイルを作成される脆弱性 - CVE-2005-1740 2011-08-29 09:55 2005-05-18 Show GitHub Exploit DB Packet Storm
251713 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-0053 2011-08-29 09:49 2011-03-1 Show GitHub Exploit DB Packet Storm
251714 6.5 警告 PostgreSQL.org
サイバートラスト株式会社
レッドハット
ターボリナックス
オラクル
- PostgreSQL におけるスタックベースのバッファオーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4015 2011-08-29 09:46 2011-01-31 Show GitHub Exploit DB Packet Storm
251715 4.3 警告 WebsiteBaker Org - WebsiteBaker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3385 2011-08-26 12:01 2011-08-26 Show GitHub Exploit DB Packet Storm
251716 9.3 危険 マイクロソフト - Microsoft Windows 7 および 2008 の Data Access Tracing component における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-1975 2011-08-26 10:22 2011-08-9 Show GitHub Exploit DB Packet Storm
251717 5 警告 マイクロソフト - Microsoft Windows Server 2003 および 2008 の DNS サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-1970 2011-08-26 10:20 2011-08-9 Show GitHub Exploit DB Packet Storm
251718 10 危険 マイクロソフト - Microsoft Windows Server 2008 の DNS サーバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-1966 2011-08-26 10:18 2011-08-9 Show GitHub Exploit DB Packet Storm
251719 4.3 警告 マイクロソフト - Microsoft Internet Explorer における Cookie を読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2011-2383 2011-08-26 10:17 2011-08-9 Show GitHub Exploit DB Packet Storm
251720 9.3 危険 マイクロソフト - Microsoft Internet Explorer 7 から 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1963 2011-08-26 10:15 2011-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269511 6.1 MEDIUM
Network
rubyonrails html_sanitizer Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via an HTML entity that i… CWE-79
Cross-site Scripting
CVE-2015-7579 2024-11-21 11:37 2016-02-16 Show GitHub Exploit DB Packet Storm
269512 6.1 MEDIUM
Network
rubyonrails html_sanitizer Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via crafted tag at… CWE-79
Cross-site Scripting
CVE-2015-7578 2024-11-21 11:37 2016-02-16 Show GitHub Exploit DB Packet Storm
269513 5.3 MEDIUM
Network
rubyonrails ruby_on_rails
rails
activerecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta… CWE-284
Improper Access Control
CVE-2015-7577 2024-11-21 11:37 2016-02-16 Show GitHub Exploit DB Packet Storm
269514 3.7 LOW
Network
rubyonrails ruby_on_rails
rails
The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22… CWE-254
 7PK - Security Features
CVE-2015-7576 2024-11-21 11:37 2016-02-16 Show GitHub Exploit DB Packet Storm
269515 5.3 MEDIUM
Network
ipswitch moveit_dmz Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a s… CWE-200
Information Exposure
CVE-2015-7680 2024-11-21 11:37 2016-02-11 Show GitHub Exploit DB Packet Storm
269516 6.1 MEDIUM
Network
ipswitch moveit_mobile Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/. CWE-79
Cross-site Scripting
CVE-2015-7679 2024-11-21 11:37 2016-02-11 Show GitHub Exploit DB Packet Storm
269517 8.8 HIGH
Network
ipswitch moveit_mobile Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vecto… CWE-352
 Origin Validation Error
CVE-2015-7678 2024-11-21 11:37 2016-02-11 Show GitHub Exploit DB Packet Storm
269518 4.3 MEDIUM
Network
ipswitch moveit_dmz The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the … CWE-200
Information Exposure
CVE-2015-7677 2024-11-21 11:37 2016-02-11 Show GitHub Exploit DB Packet Storm
269519 6.5 MEDIUM
Network
ipswitch moveit_mobile
moveit_dmz
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID i… CWE-200
Information Exposure
CVE-2015-7675 2024-11-21 11:37 2016-02-11 Show GitHub Exploit DB Packet Storm
269520 6.5 MEDIUM
Network
sauter-controls moduweb_vision Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query. CWE-79
Cross-site Scripting
CVE-2015-7916 2024-11-21 11:37 2016-02-6 Show GitHub Exploit DB Packet Storm