Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252061	7.5	危険	IXXO Internet Solutions	-	XOBBIX コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5053	2011-11-25 10:08	2011-11-23	Show	GitHub Exploit DB Packet Storm

252062	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

252063	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

252064	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1516	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

252065	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7303	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

252066	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1452	2011-11-24 11:00	2010-07-25	Show	GitHub Exploit DB Packet Storm

252067	10	危険	トレンドマイクロ IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ターボリナックスオラクルレッドハット	-	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2412	2011-11-24 10:57	2009-08-6	Show	GitHub Exploit DB Packet Storm

252068	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache httpd の mod_deflate モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1891	2011-11-24 10:54	2009-07-10	Show	GitHub Exploit DB Packet Storm

252069	4.3	警告	IBM	-	IBM Lotus Mobile Connect におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4465	2011-11-22 16:26	2011-11-19	Show	GitHub Exploit DB Packet Storm

252070	5	警告	VMware	-	VMware vCenter Update Manager におけるディレクトリトラバーサル攻撃の脆弱性	CWE-16 環境設定	CVE-2011-4404	2011-11-22 16:25	2011-11-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281831	-		linux	linux_kernel	Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled rec…	CWE-399 Resource Management Errors	CVE-2014-5471	2024-11-21 11:12	2014-09-1	Show	GitHub Exploit DB Packet Storm

281832	-		php-sqrl_project	php-sqrl	SQL injection vulnerability in sqrl_verify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter.	CWE-89 SQL Injection	CVE-2014-5458	2024-11-21 11:12	2014-08-26	Show	GitHub Exploit DB Packet Storm

281833	-		qnap	ts-469u_firmware ts-469u ts-ec1679u-rp_firmware ts-ec1679u-rp ts-459u_firmware ts-459u ss-839_firmware ss-839	QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed pass…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-5457	2024-11-21 11:12	2014-08-26	Show	GitHub Exploit DB Packet Storm

281834	-		social_stats_project	social_stats	Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal allows remote authenticated users with the "[Content Type]: Create new content" permission to inject arbi…	CWE-79 Cross-site Scripting	CVE-2014-5456	2024-11-21 11:12	2014-08-26	Show	GitHub Exploit DB Packet Storm

281835	-		privatetunnel openvpn	privatetunnel openvpn	Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a …	CWE-428 Unquoted Search Path or Element	CVE-2014-5455	2024-11-21 11:12	2014-08-26	Show	GitHub Exploit DB Packet Storm

281836	-		sas	visual_analytics	Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable exte…	NVD-CWE-Other	CVE-2014-5454	2024-11-21 11:12	2014-08-26	Show	GitHub Exploit DB Packet Storm

281837	-		ubi	uplay_pc	Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain privil…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-5453	2024-11-21 11:12	2014-08-26	Show	GitHub Exploit DB Packet Storm

281838	7.5	HIGH Network	tripodworks	gigapod_officehard_firmware gigapod_2010_firmware gigapod_3_firmware	GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a versio…	NVD-CWE-noinfo	CVE-2014-5329	2024-11-21 11:11	2023-09-8	Show	GitHub Exploit DB Packet Storm

281839	9.8	CRITICAL Network	redhat	ansible	Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as d…	CWE-74 Injection	CVE-2014-4967	2024-11-21 11:11	2020-02-19	Show	GitHub Exploit DB Packet Storm

281840	9.8	CRITICAL Network	redhat	ansible	Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code …	CWE-74 Injection	CVE-2014-4966	2024-11-21 11:11	2020-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed