Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251971 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll - North America に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0859 2011-05-17 09:49 2011-04-19 Show GitHub Exploit DB Packet Storm
251972 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0858 2011-05-17 09:48 2011-04-19 Show GitHub Exploit DB Packet Storm
251973 3.5 注意 オラクル - Oracle PeopleSoft Enterprise の Pension Administration コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0857 2011-05-17 09:47 2011-04-20 Show GitHub Exploit DB Packet Storm
251974 3.5 注意 オラクル - Oracle PeopleSoft Enterprise の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0856 2011-05-17 09:46 2011-04-20 Show GitHub Exploit DB Packet Storm
251975 5.5 警告 オラクル - Oracle Industry Applications の InForm コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0855 2011-05-17 09:45 2011-04-19 Show GitHub Exploit DB Packet Storm
251976 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0854 2011-05-17 09:44 2011-04-19 Show GitHub Exploit DB Packet Storm
251977 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0853 2011-05-17 09:43 2011-04-19 Show GitHub Exploit DB Packet Storm
251978 5.5 警告 オラクル - Oracle PeopleSoft Enterprise ELS における Enterprise Learning Mgmt に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0851 2011-05-17 09:41 2011-04-19 Show GitHub Exploit DB Packet Storm
251979 5.5 警告 オラクル - Oracle PeopleSoft Enterprise CRM における Order Capture に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0850 2011-05-17 09:28 2011-04-19 Show GitHub Exploit DB Packet Storm
251980 4.3 警告 オラクル - Oracle Java Dynamic Management Kit の HTML Adaptor における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0849 2011-05-17 09:27 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256141 6.1 MEDIUM
Network 		mantisbt mantisbt An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation script are not properly sanitized befor… CWE-79
Cross-site Scripting 		CVE-2017-12061 2024-11-21 12:08 2017-08-2 Show GitHub Exploit DB Packet Storm
256142 6.5 MEDIUM
Network 		underbit mad_libmad mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corruption seen in a crash in the mad_decode… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-11552 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256143 6.1 MEDIUM
Network 		goldplugins easy_testimonials The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excer… CWE-79
Cross-site Scripting 		CVE-2017-12131 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256144 6.1 MEDIUM
Network 		event_list_project event_list The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action. CWE-79
Cross-site Scripting 		CVE-2017-12068 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256145 7.5 HIGH
Network 		potrace_project potrace Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c. CWE-125
Out-of-bounds Read 		CVE-2017-12067 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256146 5.4 MEDIUM
Network 		cacti cacti Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer hea… CWE-79
Cross-site Scripting 		CVE-2017-12066 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256147 9.8 CRITICAL
Network 		cacti cacti spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter. NVD-CWE-noinfo
CVE-2017-12065 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256148 7.5 HIGH
Network 		open-emr openemr The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name. CWE-116
 Improper Encoding or Escaping of Output 		CVE-2017-12064 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256149 6.1 MEDIUM
Network 		connectwise manage services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafte… CWE-79
Cross-site Scripting 		CVE-2017-11727 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
256150 8.8 HIGH
Network 		connectwise manage services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an e-mail address setting. CWE-352
 Origin Validation Error 		CVE-2017-11726 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm