Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252141 2.6 注意 CloudBees - CloudBees Jenkins の Jenkins Core におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4344 2011-12-2 15:50 2011-11-8 Show GitHub Exploit DB Packet Storm
252142 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - PowerChute Business Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4263 2011-12-2 12:01 2011-12-2 Show GitHub Exploit DB Packet Storm
252143 4.3 警告 Geeklog - Geeklog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4647 2011-12-1 16:48 2011-06-23 Show GitHub Exploit DB Packet Storm
252144 6 警告 Lester Chan - WordPress 用 WP-PostRatings プラグインにおける SQL インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2011-4646 2011-12-1 16:47 2011-11-30 Show GitHub Exploit DB Packet Storm
252145 7.5 危険 Hastymail - Hastymail2 における任意のコマンドを実行される脆弱性 CWE-89
SQLインジェクション
CVE-2011-4542 2011-12-1 16:46 2011-11-30 Show GitHub Exploit DB Packet Storm
252146 7.5 危険 Novell - Novell NetWare の xdrDecodeString 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4191 2011-12-1 16:44 2011-10-5 Show GitHub Exploit DB Packet Storm
252147 7.5 危険 Namazu Project - Namazu におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-5028 2011-12-1 16:42 2011-11-30 Show GitHub Exploit DB Packet Storm
252148 5 警告 arora - Arora における証明書の Common Name (CN) を偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3367 2011-12-1 16:42 2011-11-29 Show GitHub Exploit DB Packet Storm
252149 7.5 危険 Canonical - Ubuntu の cupshelpers スクリプトにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4405 2011-12-1 16:05 2011-11-17 Show GitHub Exploit DB Packet Storm
252150 5 警告 シスコシステムズ - Cisco Nexus 5000 および 3000 シリーズスイッチにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2581 2011-12-1 11:25 2011-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253551 6.7 MEDIUM
Local
linux
opensuse
linux_kernel
leap
An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated. CWE-787
 Out-of-bounds Write
CVE-2017-18551 2024-11-21 12:20 2019-08-19 Show GitHub Exploit DB Packet Storm
253552 5.5 MEDIUM
Local
linux linux_kernel An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_get_hba_info does not initialize the hbainfo… CWE-200
Information Exposure
CVE-2017-18550 2024-11-21 12:20 2019-08-19 Show GitHub Exploit DB Packet Storm
253553 5.5 MEDIUM
Local
linux linux_kernel An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_send_raw_srb does not initialize the reply s… CWE-200
Information Exposure
CVE-2017-18549 2024-11-21 12:20 2019-08-19 Show GitHub Exploit DB Packet Storm
253554 8.8 HIGH
Network
neliosoftware nelio_ab_testing The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms. CWE-352
 Origin Validation Error
CVE-2017-18547 2024-11-21 12:20 2019-08-17 Show GitHub Exploit DB Packet Storm
253555 8.8 HIGH
Network
jayj_quicktag_project jayj_quicktag The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF. CWE-352
 Origin Validation Error
CVE-2017-18546 2024-11-21 12:20 2019-08-17 Show GitHub Exploit DB Packet Storm
253556 7.5 HIGH
Network
invite_anyone_project invite_anyone The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input. CWE-20
 Improper Input Validation 
CVE-2017-18545 2024-11-21 12:20 2019-08-17 Show GitHub Exploit DB Packet Storm
253557 8.8 HIGH
Network
invite_anyone_project invite_anyone The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF. CWE-352
 Origin Validation Error
CVE-2017-18544 2024-11-21 12:20 2019-08-17 Show GitHub Exploit DB Packet Storm
253558 9.8 CRITICAL
Network
invite_anyone_project invite_anyone The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations. CWE-284
Improper Access Control
CVE-2017-18543 2024-11-21 12:20 2019-08-17 Show GitHub Exploit DB Packet Storm
253559 6.1 MEDIUM
Network
bestwebsoft zendesk_help_center The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting
CVE-2017-18542 2024-11-21 12:20 2019-08-17 Show GitHub Exploit DB Packet Storm
253560 6.1 MEDIUM
Network
xakuro xo_security The xo-security plugin before 1.5.3 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2017-18541 2024-11-21 12:20 2019-08-17 Show GitHub Exploit DB Packet Storm