Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252081	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2011-2108	2011-06-30 10:49	2011-06-14	Show	GitHub Exploit DB Packet Storm

252082	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0335	2011-06-30 10:48	2011-06-14	Show	GitHub Exploit DB Packet Storm

252083	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0320	2011-06-30 10:47	2011-06-14	Show	GitHub Exploit DB Packet Storm

252084	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat にメモリ破損の脆弱性	CWE-119 バッファエラー	CVE-2011-2105	2011-06-30 10:44	2011-06-14	Show	GitHub Exploit DB Packet Storm

252085	5	警告	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスレッドハット	-	Samba におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0719	2011-06-30 10:02	2011-02-28	Show	GitHub Exploit DB Packet Storm

252086	4.3	警告	アップルサイバートラスト株式会社 Apache Software Foundation レッドハット	-	Apache HTTP Server 用 mod_dav_svn モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0715	2011-06-30 10:00	2011-03-8	Show	GitHub Exploit DB Packet Storm

252087	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3838	2011-06-30 09:51	2010-09-10	Show	GitHub Exploit DB Packet Storm

252088	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3837	2011-06-30 09:50	2010-09-10	Show	GitHub Exploit DB Packet Storm

252089	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3836	2011-06-30 09:49	2010-09-10	Show	GitHub Exploit DB Packet Storm

252090	6.8	警告	ESTsoft Japan 株式会社	-	ALZip におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1336	2011-06-29 14:02	2011-06-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286941	-	leon_weber	pyxtrlock	pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.	NVD-CWE-noinfo	CVE-2013-4426	2024-11-21 10:55	2014-05-19	Show	GitHub Exploit DB Packet Storm

286942	-	quick_tabs_module_project	quicktabs	The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitiv…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4406	2024-11-21 10:55	2014-05-19	Show	GitHub Exploit DB Packet Storm

286943	-	florian_weber	spaces	The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the option to move to a new group, which causes t…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4498	2024-11-21 10:55	2014-05-18	Show	GitHub Exploit DB Packet Storm

286944	-	gitlab	gitlab	The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code …	NVD-CWE-Other	CVE-2013-4489	2024-11-21 10:55	2014-05-18	Show	GitHub Exploit DB Packet Storm

286945	-	openstack	horizon	The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to chang…	CWE-287 Improper Authentication	CVE-2013-4471	2024-11-21 10:55	2014-05-15	Show	GitHub Exploit DB Packet Storm

286946	-	vicidial	vicidial	VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an …	NVD-CWE-Other	CVE-2013-4468	2024-11-21 10:55	2014-05-15	Show	GitHub Exploit DB Packet Storm

286947	-	katello	katello_installer	Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by readi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4455	2024-11-21 10:55	2014-05-15	Show	GitHub Exploit DB Packet Storm

286948	-	madeofcode	omniauth-facebook	The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.	CWE-352 Origin Validation Error	CVE-2013-4562	2024-11-21 10:55	2014-05-14	Show	GitHub Exploit DB Packet Storm

286949	-	drupalauth_project	drupalauth	lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name (uid) in a cookie.	CWE-287 Improper Authentication	CVE-2013-4552	2024-11-21 10:55	2014-05-14	Show	GitHub Exploit DB Packet Storm

286950	-	gitlab	gitlab gitlab-shell	The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.	NVD-CWE-Other	CVE-2013-4546	2024-11-21 10:55	2014-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed