Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251941 7.5 危険 ColdGen - ColdGen ColdBookmarks の index.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4915 2012-02-28 10:47 2011-10-8 Show GitHub Exploit DB Packet Storm
251942 7.5 危険 DeltaScripts - PHP Classifieds の tools/phpmailer/class.phpmailer.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4914 2012-02-28 10:43 2011-10-8 Show GitHub Exploit DB Packet Storm
251943 4.3 警告 ColdGen - ColdGen ColdUserGroup の search 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4913 2012-02-28 10:41 2011-10-8 Show GitHub Exploit DB Packet Storm
251944 7.5 危険 Discuz - UCenter Home の shop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4912 2012-02-28 10:40 2011-10-8 Show GitHub Exploit DB Packet Storm
251945 7.5 危険 Sell@Site - PHP Classifieds Ads の classi/detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4911 2012-02-28 10:39 2011-10-8 Show GitHub Exploit DB Packet Storm
251946 7.5 危険 ColdGen - ColdGen ColdCalendar の index.cfm におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4910 2012-02-28 10:37 2011-10-8 Show GitHub Exploit DB Packet Storm
251947 4.3 警告 Mechbunny - PaysiteReviewCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4909 2012-02-28 10:36 2011-10-8 Show GitHub Exploit DB Packet Storm
251948 7.5 危険 Virtue Netz - Virtue Shopping Mall の detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4908 2012-02-28 10:35 2011-10-8 Show GitHub Exploit DB Packet Storm
251949 4.3 警告 Powie - Powie pFile の pfile/kommentar.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1211 2012-02-27 17:12 2012-02-24 Show GitHub Exploit DB Packet Storm
251950 4.3 警告 Apache Software Foundation - Apache HTTP Server の mod_proxy モジュールにおけるイントラネットサーバにリクエストを送信される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3639 2012-02-27 17:01 2011-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246801 6.6 MEDIUM
Physics
simplisafe u9k-kp1000_firmware SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2018-11402 2024-11-21 12:43 2018-05-24 Show GitHub Exploit DB Packet Storm
246802 4.6 MEDIUM
Physics
simplisafe u9k-bs1000_firmware In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a notification. NVD-CWE-noinfo
CVE-2018-11401 2024-11-21 12:43 2018-05-24 Show GitHub Exploit DB Packet Storm
246803 4.6 MEDIUM
Physics
simplisafe u9k-bs1000_firmware In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power. NVD-CWE-noinfo
CVE-2018-11400 2024-11-21 12:43 2018-05-24 Show GitHub Exploit DB Packet Storm
246804 4.3 MEDIUM
Physics
simplisafe u9k-es1000_firmware
u9k-kr1_firmware
u9k-ms1000_firmware
u9k-wt1000_firmware
SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occ… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2018-11399 2024-11-21 12:43 2018-05-24 Show GitHub Exploit DB Packet Storm
246805 7.5 HIGH
Network
gnome epiphany ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NU… NVD-CWE-noinfo
CVE-2018-11396 2024-11-21 12:43 2018-05-23 Show GitHub Exploit DB Packet Storm
246806 7.8 HIGH
Local
windscribe windscribe Windscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain privileges or cause a denial of service via \\.\pipe\WindscribeService. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-11334 2024-11-21 12:43 2018-05-23 Show GitHub Exploit DB Packet Storm
246807 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing… CWE-125
Out-of-bounds Read
CVE-2018-11362 2024-11-21 12:43 2018-05-23 Show GitHub Exploit DB Packet Storm
246808 7.5 HIGH
Network
wireshark wireshark In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-11361 2024-11-21 12:43 2018-05-23 Show GitHub Exploit DB Packet Storm
246809 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a bu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-11360 2024-11-21 12:43 2018-05-23 Show GitHub Exploit DB Packet Storm
246810 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference. CWE-476
 NULL Pointer Dereference
CVE-2018-11359 2024-11-21 12:43 2018-05-23 Show GitHub Exploit DB Packet Storm