Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251991 4.3 警告 heart5 - WordPress の StatPressCN プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0641 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
251992 6.9 警告 Linux
kernel.org
- Linux の udev のデフォルト設定における任意のプログラムを実行される脆弱性 CWE-16
環境設定
CVE-2011-0640 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
251993 6.9 警告 アップル - Apple の Mac OS X における任意のプログラムを実行される脆弱性 CWE-16
環境設定
CVE-2011-0639 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
251994 6.9 警告 マイクロソフト - Microsoft Windows における任意のプログラムを実行される脆弱性 CWE-16
環境設定
CVE-2011-0638 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
251995 4.9 警告 IBM - IBM AIX の FC SCSI プロトコルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-0637 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
251996 2.1 注意 NVIDIA - NVIDIA CUDA Toolkit の cudaHostAlloc 関数における重要なメモリを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-0636 2012-03-27 18:42 2011-01-22 Show GitHub Exploit DB Packet Storm
251997 6 警告 simploo - Simploo CMS における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2011-0635 2012-03-27 18:42 2011-01-22 Show GitHub Exploit DB Packet Storm
251998 4.3 警告 Gisle Aas - WWW::Mechanize などの製品で使用される LWP の Net::HTTPS モジュールにおけるサーバをなりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2011-0633 2012-03-27 18:42 2011-03-27 Show GitHub Exploit DB Packet Storm
251999 6.8 警告 シマンテック - SEP の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0551 2012-03-27 18:42 2011-08-10 Show GitHub Exploit DB Packet Storm
252000 4.3 警告 シマンテック - Symantec SEP の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0550 2012-03-27 18:42 2011-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246281 9.8 CRITICAL
Network
pescms pescms_team In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-16370 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246282 5.5 MEDIUM
Local
xpdfreader xpdf XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE… NVD-CWE-noinfo
CVE-2018-16369 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246283 5.5 MEDIUM
Local
xpdfreader xpdf SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm. CWE-125
Out-of-bounds Read
CVE-2018-16368 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246284 9.9 CRITICAL
Network
qduoj onlinejudge In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include. CWE-22
Path Traversal
CVE-2018-16367 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246285 8.8 HIGH
Network
idreamsoft icms An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF. CWE-352
 Origin Validation Error
CVE-2018-16366 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246286 8.8 HIGH
Network
idreamsoft icms An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF. CWE-352
 Origin Validation Error
CVE-2018-16365 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246287 6.1 MEDIUM
Network
mantisbt source_integration An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages … CWE-79
Cross-site Scripting
CVE-2018-16362 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246288 6.8 MEDIUM
Network
google gvisor Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS. NVD-CWE-noinfo
CVE-2018-16359 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246289 5.4 MEDIUM
Network
dotclear dotclear A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS pay… CWE-79
Cross-site Scripting
CVE-2018-16358 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm
246290 9.8 CRITICAL
Network
fhcrm_project fhcrm An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the index.php/User/read limit parameter. CWE-89
SQL Injection
CVE-2018-16354 2024-11-21 12:52 2018-09-3 Show GitHub Exploit DB Packet Storm