Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252041	5	警告	Ulli Horlacher	-	F*EX におけるファイルをアップロードされる脆弱性	CWE-287 不適切な認証	CVE-2011-1409	2012-03-27 18:43	2011-06-24	Show	GitHub Exploit DB Packet Storm

252042	7.5	危険	Exim Development	-	Exim の DKIM 実装における任意のコードを実行させる脆弱性	CWE-20 不適切な入力確認	CVE-2011-1407	2012-03-27 18:43	2011-05-16	Show	GitHub Exploit DB Packet Storm

252043	4.3	警告	Mahara	-	Mahara における資格情報を取得される脆弱性	CWE-16 環境設定	CVE-2011-1406	2012-03-27 18:43	2011-05-13	Show	GitHub Exploit DB Packet Storm

252044	3.5	注意	Mahara	-	Mahara におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1405	2012-03-27 18:43	2011-05-13	Show	GitHub Exploit DB Packet Storm

252045	4	警告	Mahara	-	Mahara における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1404	2012-03-27 18:43	2011-05-13	Show	GitHub Exploit DB Packet Storm

252046	6.8	警告	Mahara	-	Mahara の pieforms の実装におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-1403	2012-03-27 18:43	2011-05-13	Show	GitHub Exploit DB Packet Storm

252047	6.5	警告	Mahara	-	Mahara におけるアクセスをブロックされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1402	2012-03-27 18:43	2011-05-13	Show	GitHub Exploit DB Packet Storm

252048	3.5	注意	ikiwiki	-	ikiwiki におけるクロスサイトスクリプティング攻撃をされる脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1401	2012-03-27 18:43	2011-04-11	Show	GitHub Exploit DB Packet Storm

252049	6.8	警告	Debian Canonical	-	Debian GNU/Linux squeeze などの製品で使用される shell_escape_commands 命令の初期設定における任意のコードを実行される脆弱性	CWE-16 環境設定	CVE-2011-1400	2012-03-27 18:43	2011-03-22	Show	GitHub Exploit DB Packet Storm

252050	5	警告	IBM	-	IBM WAS の管理コンソールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1359	2012-03-27 18:43	2011-09-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246291	5.9	MEDIUM Network	tinc-vpn debian starwindsoftware	tinc debian_linux starwind_virtual_san	Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.	CWE-306 Missing Authentication for Critical Function	CVE-2018-16758	2024-11-21 12:53	2018-10-11	Show	GitHub Exploit DB Packet Storm

246292	3.7	LOW Network	tinc-vpn debian starwindsoftware	tinc debian_linux starwind_virtual_san	tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1.	CWE-287 Improper Authentication	CVE-2018-16738	2024-11-21 12:53	2018-10-11	Show	GitHub Exploit DB Packet Storm

246293	5.3	MEDIUM Network	tinc-vpn starwindsoftware	tinc starwind_virtual_san	tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.	CWE-287 Improper Authentication	CVE-2018-16737	2024-11-21 12:53	2018-10-11	Show	GitHub Exploit DB Packet Storm

246294	5.3	MEDIUM Network	progress	telerik_extensions_for_asp.net_mvc	Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to access files inside the server's web directory. NOTE: this product has been obsole…	NVD-CWE-noinfo	CVE-2018-17060	2024-11-21 12:53	2018-10-9	Show	GitHub Exploit DB Packet Storm

246295	6.1	MEDIUM Network	progress	sitefinity_cms	Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to…	CWE-79 Cross-site Scripting	CVE-2018-17054	2024-11-21 12:53	2018-10-4	Show	GitHub Exploit DB Packet Storm

246296	6.1	MEDIUM Network	progress	sitefinity_cms	Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to…	CWE-79 Cross-site Scripting	CVE-2018-17053	2024-11-21 12:53	2018-10-4	Show	GitHub Exploit DB Packet Storm

246297	4.9	MEDIUM Network	djangoproject	django	An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts. The read-only password widget used by the Django Admin to display a…	CWE-522 Insufficiently Protected Credentials	CVE-2018-16984	2024-11-21 12:53	2018-10-3	Show	GitHub Exploit DB Packet Storm

246298	5.5	MEDIUM Local	freebsd	freebsd	In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to userland in the getcontex…	CWE-200 Information Exposure	CVE-2018-17155	2024-11-21 12:53	2018-09-28	Show	GitHub Exploit DB Packet Storm

246299	5.5	MEDIUM Local	freebsd	freebsd	In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer dereference can occur. Unprivi…	CWE-476 NULL Pointer Dereference	CVE-2018-17154	2024-11-21 12:53	2018-09-28	Show	GitHub Exploit DB Packet Storm

246300	6.1	MEDIUM Network	progress	sitefinity_cms	Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-17056	2024-11-21 12:53	2018-09-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed