Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251891	5	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおける CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-4512	2012-02-8 10:54	2012-01-24	Show	GitHub Exploit DB Packet Storm

251892	4.3	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4511	2012-02-8 10:53	2012-01-24	Show	GitHub Exploit DB Packet Storm

251893	4.3	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4510	2012-02-8 10:51	2012-01-24	Show	GitHub Exploit DB Packet Storm

251894	10	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4509	2012-02-8 10:50	2012-01-24	Show	GitHub Exploit DB Packet Storm

251895	10	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-4508	2012-02-8 10:49	2012-01-24	Show	GitHub Exploit DB Packet Storm

251896	2.6	注意	HTC Corporation	-	HTC 製 Android 端末に Wi-Fi 認証情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2011-4872	2012-02-7 16:21	2012-02-2	Show	GitHub Exploit DB Packet Storm

251897	7.5	危険	Scriptsez.net	-	Scriptsez.net の Ez Album における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0983	2012-02-7 16:19	2012-02-2	Show	GitHub Exploit DB Packet Storm

251898	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Agent Zone の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0982	2012-02-7 16:18	2012-02-2	Show	GitHub Exploit DB Packet Storm

251899	5	警告	KYBERNETIKA	-	phpShowtime における任意のディレクトリおよびイメージファイルをリストアップされる脆弱性	CWE-22 パス・トラバーサル	CVE-2012-0981	2012-02-7 16:17	2012-02-2	Show	GitHub Exploit DB Packet Storm

251900	7.5	危険	phux Development	-	phux Download Manager の download.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0980	2012-02-7 16:16	2012-02-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
302531	-		opera	opera_browser	Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages.	CWE-399 Resource Management Errors	CVE-2011-1337	2024-11-21 10:26	2011-07-1	Show	GitHub Exploit DB Packet Storm

302532	-		cybozu	office	Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user lis…	CWE-79 Cross-site Scripting	CVE-2011-1335	2024-11-21 10:26	2011-06-30	Show	GitHub Exploit DB Packet Storm

302533	-		cybozu	office garoon dezie mailwise collaborex	Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote att…	CWE-79 Cross-site Scripting	CVE-2011-1334	2024-11-21 10:26	2011-06-30	Show	GitHub Exploit DB Packet Storm

302534	-		cybozu	garoon office	Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading gr…	CWE-79 Cross-site Scripting	CVE-2011-1333	2024-11-21 10:26	2011-06-30	Show	GitHub Exploit DB Packet Storm

302535	-		cybozu	garoon	Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CV…	CWE-79 Cross-site Scripting	CVE-2011-1332	2024-11-21 10:26	2011-06-30	Show	GitHub Exploit DB Packet Storm

302536	-		ulli_horlacher	fex	Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks …	CWE-287 Improper Authentication	CVE-2011-1409	2024-11-21 10:26	2011-06-25	Show	GitHub Exploit DB Packet Storm

302537	-		kbs	weblygo	Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified v…	CWE-79 Cross-site Scripting	CVE-2011-1330	2024-11-21 10:26	2011-06-23	Show	GitHub Exploit DB Packet Storm

302538	-		brad_fitzpatrick	djabberd	DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML documen…	CWE-399 Resource Management Errors	CVE-2011-1757	2024-11-21 10:26	2011-06-21	Show	GitHub Exploit DB Packet Storm

302539	-		citadel	citadel	modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption…	CWE-399 Resource Management Errors	CVE-2011-1756	2024-11-21 10:26	2011-06-21	Show	GitHub Exploit DB Packet Storm

302540	7.5	HIGH Network	jabberd2 fedoraproject apple	jabberd2 fedora mac_os_x_server mac_os_x	jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document c…	CWE-776 XML Entity Expansion	CVE-2011-1755	2024-11-21 10:26	2011-06-21	Show	GitHub Exploit DB Packet Storm