Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251981 7.5 危険 Vtiger - vTiger CRM の Calendar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4559 2011-11-30 16:22 2011-11-28 Show GitHub Exploit DB Packet Storm
251982 4.3 警告 Contao - Contao におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4335 2011-11-29 16:28 2011-11-28 Show GitHub Exploit DB Packet Storm
251983 4.3 警告 Dolibarr ERP & CRM - Dolibarr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4329 2011-11-29 16:27 2011-11-8 Show GitHub Exploit DB Packet Storm
251984 4.3 警告 Ruby on Rails project - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4319 2011-11-29 16:26 2011-11-28 Show GitHub Exploit DB Packet Storm
251985 4.3 警告 Combodo - Combodo iTop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4275 2011-11-29 16:23 2011-11-26 Show GitHub Exploit DB Packet Storm
251986 9.3 危険 SunPlus Electronics - DVR Remote ActiveX コントロールの DVRemoteAx.ax における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3828 2011-11-29 16:22 2011-11-26 Show GitHub Exploit DB Packet Storm
251987 6.8 警告 IBM - IBM TS3100 および TS3200 テープ・ライブラリにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-1372 2011-11-29 16:15 2011-11-23 Show GitHub Exploit DB Packet Storm
251988 1.9 注意 ヒューレット・パッカード
IBM
- IBM WebSphere MQ における listener プロセス強制終了の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1378 2011-11-29 16:14 2011-11-26 Show GitHub Exploit DB Packet Storm
251989 5 警告 シスコシステムズ - Cisco Secure Access Control System における任意のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-0951 2011-11-29 10:38 2011-03-30 Show GitHub Exploit DB Packet Storm
251990 5 警告 シスコシステムズ - Cisco Network Access Control Guest Server におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0963 2011-11-29 10:37 2011-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282301 - reviewboard review_board Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff frag… CWE-79
Cross-site Scripting
CVE-2014-5027 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
282302 - sonicwall uma_em5000
global_management_system
analyzer
Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id pa… CWE-79
Cross-site Scripting
CVE-2014-5024 2024-11-21 11:11 2014-07-24 Show GitHub Exploit DB Packet Storm
282303 - netbsd
eterna
netbsd
bozohttpd
bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme an… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-5015 2024-11-21 11:11 2014-07-24 Show GitHub Exploit DB Packet Storm
282304 - netgear
acme
dlink
wgr614
micro_httpd
mr-adsl-dg834
dsl2750u
dsl2740u
Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service (crash) via a long strin… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-4927 2024-11-21 11:11 2014-07-24 Show GitHub Exploit DB Packet Storm
282305 - x xf86-video-intel Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface nam… CWE-22
Path Traversal
CVE-2014-4910 2024-11-21 11:11 2014-07-24 Show GitHub Exploit DB Packet Storm
282306 - tenable nessus
web_ui
The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter. CWE-200
Information Exposure
CVE-2014-4980 2024-11-21 11:11 2014-07-23 Show GitHub Exploit DB Packet Storm
282307 - citrix xenserver Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk (V… NVD-CWE-noinfo
CVE-2014-4948 2024-11-21 11:11 2014-07-23 Show GitHub Exploit DB Packet Storm
282308 - citrix xenserver Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-4947 2024-11-21 11:11 2014-07-23 Show GitHub Exploit DB Packet Storm
282309 - gitlist gitlist Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkou… NVD-CWE-Other
CVE-2014-5023 2024-11-21 11:11 2014-07-22 Show GitHub Exploit DB Packet Storm
282310 - drupal drupal Cross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject arbitrary web script or HTML via vectors involving forms with an Ajax-enabled t… CWE-79
Cross-site Scripting
CVE-2014-5022 2024-11-21 11:11 2014-07-22 Show GitHub Exploit DB Packet Storm