Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251871	4.3	警告	One Designs	-	WordPress 用 Cover WP テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3860	2012-03-5 11:07	2011-09-28	Show	GitHub Exploit DB Packet Storm

251872	4.3	警告	ThemeHybrid	-	WordPress 用 Trending テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3859	2012-03-5 11:06	2011-09-28	Show	GitHub Exploit DB Packet Storm

251873	4.3	警告	zespia	-	WordPress 用 Pixiv Custom テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3858	2012-03-5 11:06	2011-09-28	Show	GitHub Exploit DB Packet Storm

251874	4.3	警告	Antisocial Media LLC	-	WordPress 用 Antisnews テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3857	2012-03-5 11:05	2011-09-28	Show	GitHub Exploit DB Packet Storm

251875	4.3	警告	A Tasty Pixel	-	WordPress 用 Elegant Grunge テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3856	2012-03-5 11:05	2011-09-28	Show	GitHub Exploit DB Packet Storm

251876	4.3	警告	Graph Paper Press	-	WordPress 用 F8 Lite テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3855	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

251877	4.3	警告	Quirm	-	WordPress 用 ZenLite テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3854	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

251878	4.3	警告	ThemeHybrid	-	WordPress 用 Hybrid テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3853	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

251879	4.3	警告	Theme4Press	-	WordPress 用 EvoLve テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3852	2012-03-5 11:03	2011-09-28	Show	GitHub Exploit DB Packet Storm

251880	4.3	警告	DevPress	-	WordPress 用 News テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3851	2012-03-5 11:03	2011-09-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274751	-	debian xmlsoft apple canonical	debian_linux libxml2 watchos iphone_os mac_os_x tvos ubuntu_linux	The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML da…	CWE-399 Resource Management Errors	CVE-2015-8035	2024-11-21 11:37	2015-11-19	Show	GitHub Exploit DB Packet Storm

274752	-	canonical strongswan	ubuntu_linux strongswan	The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers t…	CWE-264 CWE-20 Permissions, Privileges, and Access Controls Improper Input Validation	CVE-2015-8023	2024-11-21 11:37	2015-11-19	Show	GitHub Exploit DB Packet Storm

274753	-	hp debian apple canonical xmlsoft	icewall_file_manager icewall_federation_agent debian_linux watchos iphone_os mac_os_x tvos ubuntu_linux libxml2	The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a d…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7942	2024-11-21 11:37	2015-11-19	Show	GitHub Exploit DB Packet Storm

274754	-	canonical xmlsoft	ubuntu_linux libxml2	libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7941	2024-11-21 11:37	2015-11-19	Show	GitHub Exploit DB Packet Storm

274755	-	citrix	netscaler_service_delivery_appliance_service_vm netscaler_gateway_firmware netscaler_application_delivery_controller_firmware	The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler …	CWE-200 Information Exposure	CVE-2015-7998	2024-11-21 11:37	2015-11-18	Show	GitHub Exploit DB Packet Storm

274756	-	citrix	netscaler_service_delivery_appliance_service_vm netscaler_application_delivery_controller_firmware netscaler_gateway_firmware	Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, …	CWE-79 Cross-site Scripting	CVE-2015-7997	2024-11-21 11:37	2015-11-18	Show	GitHub Exploit DB Packet Storm

274757	-	citrix	netscaler_application_delivery_controller_firmware netscaler_service_delivery_appliance_service_vm netscaler_gateway_firmware	The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service …	CWE-200 Information Exposure	CVE-2015-7996	2024-11-21 11:37	2015-11-18	Show	GitHub Exploit DB Packet Storm

274758	-	apple xmlsoft	watchos iphone_os mac_os_x tvos libxslt	The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to…	NVD-CWE-Other	CVE-2015-7995	2024-11-21 11:37	2015-11-18	Show	GitHub Exploit DB Packet Storm

274759	-	xen	xen	The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service (host crash) via a preemptible hypercall to the multic…	CWE-254 7PK - Security Features	CVE-2015-7812	2024-11-21 11:37	2015-11-18	Show	GitHub Exploit DB Packet Storm

274760	-	opensuse mega-nerd	opensuse libsndfile	Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7805	2024-11-21 11:37	2015-11-18	Show	GitHub Exploit DB Packet Storm