Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251741 5 警告 utage.org - 宴会くんにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2675 2011-10-7 12:03 2011-10-7 Show GitHub Exploit DB Packet Storm
251742 2.6 注意 HTC Corporation - 複数の Android 用 HTC 製品における電話番号およびその他の重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3975 2011-10-7 11:46 2011-10-3 Show GitHub Exploit DB Packet Storm
251743 5 警告 FFmpeg - FFmpeg の decode_residual_inter 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3974 2011-10-7 11:33 2011-10-2 Show GitHub Exploit DB Packet Storm
251744 4.3 警告 PunBB - PunBB の include/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3371 2011-10-7 11:29 2011-10-2 Show GitHub Exploit DB Packet Storm
251745 9 危険 ヒューレット・パッカード - HP NonStop Servers における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2411 2011-10-7 11:26 2011-09-19 Show GitHub Exploit DB Packet Storm
251746 4.3 警告 TWiki - TWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3010 2011-10-7 11:20 2011-09-22 Show GitHub Exploit DB Packet Storm
251747 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるキー操作を読み取られる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3866 2011-10-7 11:10 2011-09-27 Show GitHub Exploit DB Packet Storm
251748 5 警告 FFmpeg - FFmpeg の libavcodec 内にある cavsdec.c における サービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3973 2011-10-7 10:59 2011-10-2 Show GitHub Exploit DB Packet Storm
251749 6.8 警告 FFmpeg
Libav		 - FFmpeg および libav の decode_residual_block 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3362 2011-10-7 10:58 2011-10-2 Show GitHub Exploit DB Packet Storm
251750 - - Investintech.com Inc. - SlimPDF Reader に複数の脆弱性 - - 2011-10-7 10:56 2011-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273471 - cisco ios The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CS… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-4185 2024-11-21 11:30 2015-06-13 Show GitHub Exploit DB Packet Storm
273472 - cisco email_security_appliance The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF rec… CWE-20
 Improper Input Validation  		CVE-2015-4184 2024-11-21 11:30 2015-06-13 Show GitHub Exploit DB Packet Storm
273473 - cisco identity_services_engine_software The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or chang… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-4182 2024-11-21 11:30 2015-06-12 Show GitHub Exploit DB Packet Storm
273474 - strongswan
debian
canonical 		strongswan_vpn_client
debian_linux
ubuntu_linux
strongswan 		strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication rest… CWE-200
Information Exposure 		CVE-2015-4171 2024-11-21 11:30 2015-06-11 Show GitHub Exploit DB Packet Storm
273475 - zanematthew zm_ajax_login_\&_register Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the templ… CWE-22
Path Traversal 		CVE-2015-4153 2024-11-21 11:30 2015-06-11 Show GitHub Exploit DB Packet Storm
273476 - wftpserver wing_ftp_server Multiple cross-site request forgery (CSRF) vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrar… CWE-352
 Origin Validation Error 		CVE-2015-4108 2024-11-21 11:30 2015-06-11 Show GitHub Exploit DB Packet Storm
273477 - coppermine-gallery coppermine_photo_gallery Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php. CWE-200
Information Exposure 		CVE-2015-3923 2024-11-21 11:30 2015-06-11 Show GitHub Exploit DB Packet Storm
273478 - dolibarr dolibarr Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htd… CWE-79
Cross-site Scripting 		CVE-2015-3935 2024-11-21 11:30 2015-06-10 Show GitHub Exploit DB Packet Storm
273479 - apple
redhat
php 		mac_os_x
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise_linux_hpc_node_eus
php 		The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obta… CWE-20
 Improper Input Validation  		CVE-2015-4148 2024-11-21 11:30 2015-06-10 Show GitHub Exploit DB Packet Storm
273480 - redhat
apple
php 		enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise_linux_hpc_node_eus
mac_os_x
php 		The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows remote attackers to… CWE-19
 Data Processing Errors 		CVE-2015-4147 2024-11-21 11:30 2015-06-10 Show GitHub Exploit DB Packet Storm