Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252001 4.3 警告 ヒューレット・パッカード - 複数の HP Photosmart 製品で使用される Embedded Web Server (EWS) の webscan コンポーネントにおけるスキャン面のドキュメントを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-1531 2012-03-27 18:43 2011-04-14 Show GitHub Exploit DB Packet Storm
252002 4.3 警告 シマンテック - Symantec LUA の 管理ログイン GUI ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1524 2012-03-27 18:43 2011-03-21 Show GitHub Exploit DB Packet Storm
252003 7.5 危険 Doctrine Project - Doctrine の Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1522 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
252004 4.3 警告 OTRS プロジェクト - OTRS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1518 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
252005 5 警告 ヒューレット・パッカード - HP OpenView Storage Data Protector の inet サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1515 2012-03-27 18:43 2011-06-28 Show GitHub Exploit DB Packet Storm
252006 5 警告 ヒューレット・パッカード - HP OpenView Storage Data Protector の inet サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-1514 2012-03-27 18:43 2011-06-28 Show GitHub Exploit DB Packet Storm
252007 5 警告 Digium - Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1507 2012-03-27 18:43 2011-04-21 Show GitHub Exploit DB Packet Storm
252008 6.8 警告 Kerio Technologies - Kerio Connect の STARTTLS 実装における暗号化された SMTP セッションにコマンドを挿入される脆弱性 CWE-20
不適切な入力確認
CVE-2011-1506 2012-03-27 18:43 2011-03-22 Show GitHub Exploit DB Packet Storm
252009 10 危険 IBM - IBM Lotus Quickr services for Lotus Domino における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2011-1505 2012-03-27 18:43 2011-03-22 Show GitHub Exploit DB Packet Storm
252010 4 警告 Liferay
Apache Software Foundation
- Liferay Portal Community Edition における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-1502 2012-03-27 18:43 2011-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246351 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreacha… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2018-16766 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246352 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-16765 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246353 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::Functi… CWE-125
Out-of-bounds Read
CVE-2018-16764 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246354 9.8 CRITICAL
Network
thedaylightstudio fuel_cms FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. CWE-74
Injection
CVE-2018-16763 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246355 9.8 CRITICAL
Network
thedaylightstudio fuel_cms FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items. CWE-89
SQL Injection
CVE-2018-16762 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246356 6.1 MEDIUM
Network
eventum_project eventum Eventum before 3.4.0 has an open redirect vulnerability. CWE-601
Open Redirect
CVE-2018-16761 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246357 6.1 MEDIUM
Network
easycms easycms The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via an onhashchange event. CWE-79
Cross-site Scripting
CVE-2018-16759 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246358 6.5 MEDIUM
Network
imagemagick
canonical
imagemagick
ubuntu_linux
In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2018-16750 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246359 6.5 MEDIUM
Network
imagemagick
canonical
debian
imagemagick
ubuntu_linux
debian_linux
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a c… CWE-476
 NULL Pointer Dereference
CVE-2018-16749 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
246360 5.4 MEDIUM
Network
rcfilters_project rcfilters In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings). CWE-79
Cross-site Scripting
CVE-2018-16736 2024-11-21 12:53 2018-09-9 Show GitHub Exploit DB Packet Storm