Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251741	7.8	危険	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0094	2012-01-23 09:59	2012-01-17	Show	GitHub Exploit DB Packet Storm

251742	9.3	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System における権限を取得される脆弱性	CWE-Other その他	CVE-2011-4053	2012-01-20 16:50	2012-01-19	Show	GitHub Exploit DB Packet Storm

251743	2.1	注意	DELL EMC (旧 EMC Corporation)	-	EMC SourceOne Email Management の Web 検索機能における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4142	2012-01-20 16:49	2012-01-19	Show	GitHub Exploit DB Packet Storm

251744	4.6	警告	IBM	-	IBM WebSphere Application Server の iscdeploy におけるファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1376	2012-01-20 16:48	2012-01-18	Show	GitHub Exploit DB Packet Storm

251745	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2317	2012-01-20 16:45	2012-01-17	Show	GitHub Exploit DB Packet Storm

251746	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3524	2012-01-20 16:44	2012-01-17	Show	GitHub Exploit DB Packet Storm

251747	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3514	2012-01-20 16:43	2012-01-17	Show	GitHub Exploit DB Packet Storm

251748	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3509	2012-01-20 16:40	2012-01-17	Show	GitHub Exploit DB Packet Storm

251749	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2326	2012-01-20 16:39	2012-01-17	Show	GitHub Exploit DB Packet Storm

251750	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2325	2012-01-20 16:28	2012-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247631	4.7	MEDIUM Network	modx	modx_revolution	In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request. This is exploitable only in conjunction with other issues such…	CWE-79 Cross-site Scripting	CVE-2017-9071	2024-11-21 12:35	2017-05-19	Show	GitHub Exploit DB Packet Storm

247632	5.4	MEDIUM Network	modx	modx_revolution	In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php.	CWE-79 Cross-site Scripting	CVE-2017-9070	2024-11-21 12:35	2017-05-19	Show	GitHub Exploit DB Packet Storm

247633	8.8	HIGH Network	modx	modx_revolution	In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-9069	2024-11-21 12:35	2017-05-19	Show	GitHub Exploit DB Packet Storm

247634	6.1	MEDIUM Network	modx	modx_revolution	In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.	CWE-79 Cross-site Scripting	CVE-2017-9068	2024-11-21 12:35	2017-05-19	Show	GitHub Exploit DB Packet Storm

247635	7.0	HIGH Local	modx php	modx_revolution php	In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/i…	CWE-22 Path Traversal	CVE-2017-9067	2024-11-21 12:35	2017-05-19	Show	GitHub Exploit DB Packet Storm

247636	8.6	HIGH Network	wordpress debian	wordpress debian_linux	In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-9066	2024-11-21 12:35	2017-05-18	Show	GitHub Exploit DB Packet Storm

247637	7.5	HIGH Network	wordpress debian	wordpress debian_linux	In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.	CWE-20 Improper Input Validation	CVE-2017-9065	2024-11-21 12:35	2017-05-18	Show	GitHub Exploit DB Packet Storm

247638	8.8	HIGH Network	wordpress debian	wordpress debian_linux	In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.	CWE-352 Origin Validation Error	CVE-2017-9064	2024-11-21 12:35	2017-05-18	Show	GitHub Exploit DB Packet Storm

247639	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session.	CWE-79 Cross-site Scripting	CVE-2017-9063	2024-11-21 12:35	2017-05-18	Show	GitHub Exploit DB Packet Storm

247640	8.6	HIGH Network	wordpress debian	wordpress debian_linux	In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.	CWE-352 CWE-79 CWE-601 Origin Validation Error Cross-site Scripting Open Redirect	CVE-2017-9062	2024-11-21 12:35	2017-05-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed