Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252081 4.3 警告 Infoproject - Infoproject Biznis Heroj におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5040 2012-01-5 14:27 2011-12-30 Show GitHub Exploit DB Packet Storm
252082 7.5 危険 Infoproject - Infoproject Biznis Heroj における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5039 2012-01-5 14:26 2011-12-30 Show GitHub Exploit DB Packet Storm
252083 7.5 危険 hitCode - hitCode hitAppoint における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5038 2012-01-5 14:24 2011-12-30 Show GitHub Exploit DB Packet Storm
252084 4.4 警告 ConfigServer - ConfigServer Security & Firewall におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5033 2012-01-5 14:21 2011-12-10 Show GitHub Exploit DB Packet Storm
252085 4.9 警告 WinMount - WinMount の WMDrive.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-5032 2012-01-5 14:20 2011-12-29 Show GitHub Exploit DB Packet Storm
252086 7.5 危険 Shilpi Computers Limited. - cApexWEB の servlet/capexweb.parentvalidatepassword における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5031 2012-01-5 14:19 2011-12-29 Show GitHub Exploit DB Packet Storm
252087 3.5 注意 valthebald - Drupal 用 Meta tags quick モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5030 2012-01-5 14:18 2011-12-14 Show GitHub Exploit DB Packet Storm
252088 4.3 警告 Alexander Palmo - Simple PHP Blog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5029 2012-01-5 11:07 2011-12-29 Show GitHub Exploit DB Packet Storm
252089 4 警告 Novell - Novell Sentinel Log Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5028 2012-01-5 10:49 2011-12-29 Show GitHub Exploit DB Packet Storm
252090 4.3 警告 Zabbix - Zabbix におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5027 2012-01-5 10:49 2011-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247191 9.8 CRITICAL
Network 		abb srea-50_firmware
srea-01_firmware 		In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy… CWE-22
Path Traversal 		CVE-2017-9664 2024-11-21 12:36 2018-05-25 Show GitHub Exploit DB Packet Storm
247192 6.5 MEDIUM
Network 		accellion kiteworks Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to … CWE-287
Improper Authentication 		CVE-2017-9421 2024-11-21 12:36 2018-05-24 Show GitHub Exploit DB Packet Storm
247193 4.1 MEDIUM
Local 		schneider-electric ampla_manufacturing_execution_system Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attac… CWE-522
 Insufficiently Protected Credentials 		CVE-2017-9637 2024-11-21 12:36 2018-05-18 Show GitHub Exploit DB Packet Storm
247194 3.9 LOW
Local 		schneider-electric ampla_manufacturing_execution_system Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password hashing algorithm … CWE-326
Inadequate Encryption Strength 		CVE-2017-9635 2024-11-21 12:36 2018-05-18 Show GitHub Exploit DB Packet Storm
247195 6.5 MEDIUM
Adjacent 		philips intellivue_mx40_firmware Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2017-9658 2024-11-21 12:36 2018-05-1 Show GitHub Exploit DB Packet Storm
247196 6.5 MEDIUM
Adjacent 		philips intellivue_mx40_firmware Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the centra… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2017-9657 2024-11-21 12:36 2018-05-1 Show GitHub Exploit DB Packet Storm
247197 8.8 HIGH
Network 		philips dosewise The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV… CWE-522
 Insufficiently Protected Credentials 		CVE-2017-9654 2024-11-21 12:36 2018-04-25 Show GitHub Exploit DB Packet Storm
247198 9.1 CRITICAL
Network 		philips dosewise The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privileges that can affect confidentiality, i… CWE-798
 Use of Hard-coded Credentials 		CVE-2017-9656 2024-11-21 12:36 2018-04-25 Show GitHub Exploit DB Packet Storm
247199 9.8 CRITICAL
Network 		mitsubishielectric e-designer Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9638 2024-11-21 12:36 2018-04-17 Show GitHub Exploit DB Packet Storm
247200 9.8 CRITICAL
Network 		mitsubishielectric e-designer Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9636 2024-11-21 12:36 2018-04-17 Show GitHub Exploit DB Packet Storm