Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252161 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2434 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
252162 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2433 2011-10-18 16:26 2011-09-13 Show GitHub Exploit DB Packet Storm
252163 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の U3D TIFF リソースにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2432 2011-10-18 16:25 2011-09-13 Show GitHub Exploit DB Packet Storm
252164 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2431 2011-10-18 16:25 2011-09-13 Show GitHub Exploit DB Packet Storm
252165 6.9 警告 アドビシステムズ - Adobe Reader における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-1353 2011-10-18 16:23 2011-09-13 Show GitHub Exploit DB Packet Storm
252166 5.8 警告 Adam Kennedy - Perl モジュール Crypt::DSA における署名を偽装される脆弱性 CWE-310
暗号の問題 		CVE-2011-3599 2011-10-14 15:50 2011-10-10 Show GitHub Exploit DB Packet Storm
252167 5 警告 株式会社ロックオン - EC-CUBE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3988 2011-10-14 14:01 2011-10-14 Show GitHub Exploit DB Packet Storm
252168 6.8 警告 小山浩之 - DBD::mysqlPP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3989 2011-10-14 12:02 2011-10-14 Show GitHub Exploit DB Packet Storm
252169 5 警告 Novell - Novell GroupWise の GroupWise Internet Agent (GWIA) におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2219 2011-10-14 10:39 2010-06-30 Show GitHub Exploit DB Packet Storm
252170 5 警告 Novell - Novell GroupWise の GroupWise Internet Agent (GWIA) におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2218 2011-10-14 10:34 2010-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258151 6.3 MEDIUM
Network 		gitlab gitlab GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a … CWE-269
 Improper Privilege Management 		CVE-2017-11438 2024-11-21 12:07 2017-08-3 Show GitHub Exploit DB Packet Storm
258152 6.5 MEDIUM
Network 		gitlab gitlab GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read reposi… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-11437 2024-11-21 12:07 2017-08-3 Show GitHub Exploit DB Packet Storm
258153 6.5 MEDIUM
Network 		pega pega_platform The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by lever… CWE-200
Information Exposure 		CVE-2017-11356 2024-11-21 12:07 2017-08-3 Show GitHub Exploit DB Packet Storm
258154 6.1 MEDIUM
Network 		pega pega_platform Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to the main page; the (2) … CWE-79
Cross-site Scripting 		CVE-2017-11355 2024-11-21 12:07 2017-08-3 Show GitHub Exploit DB Packet Storm
258155 4.4 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by… CWE-125
Out-of-bounds Read 		CVE-2017-11334 2024-11-21 12:07 2017-08-3 Show GitHub Exploit DB Packet Storm
258156 9.8 CRITICAL
Network 		sol-connect sol.connect_iset-mpp_meter_firmware SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action. CWE-89
SQL Injection 		CVE-2017-11494 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
258157 8.8 HIGH
Network 		joomla joomla\! The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate… CWE-295
Improper Certificate Validation  		CVE-2017-11364 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
258158 9.8 CRITICAL
Network 		trendmicro deep_discovery_director A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console. CWE-78
OS Command  		CVE-2017-11381 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
258159 9.8 CRITICAL
Network 		trendmicro deep_discovery_director Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Di… CWE-798
 Use of Hard-coded Credentials 		CVE-2017-11380 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
258160 7.5 HIGH
Network 		trendmicro deep_discovery_director Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2017-11379 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm