Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252191 10 危険 CA Technologies - 複数の CA 製品の Arclib library におけるウィルス検知を回避される脆弱性 CWE-DesignError
CWE-noinfo
CVE-2009-0042 2010-12-27 10:30 2009-01-26 Show GitHub Exploit DB Packet Storm
252192 9.3 危険 アドビシステムズ - Adobe Illustrator における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3152 2010-12-24 16:16 2010-12-3 Show GitHub Exploit DB Packet Storm
252193 - - Laurent Destailleur - AWStats に脆弱性 - - 2010-12-24 16:06 2010-12-1 Show GitHub Exploit DB Packet Storm
252194 5 警告 ISC, Inc. - ISC BIND named の allow-query の処理における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3615 2010-12-24 16:01 2010-12-2 Show GitHub Exploit DB Packet Storm
252195 9.3 危険 CA Technologies - CA eTrust Antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5529 2010-12-24 11:50 2008-12-12 Show GitHub Exploit DB Packet Storm
252196 10 危険 CA Technologies - Windows 上で稼働する CA ARCserve Backup の LDBserver サービスにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2008-5415 2010-12-24 11:50 2008-12-10 Show GitHub Exploit DB Packet Storm
252197 5 警告 CA Technologies - CA ARCserve Backup の asdbapi.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4400 2010-12-24 11:48 2008-10-9 Show GitHub Exploit DB Packet Storm
252198 5 警告 CA Technologies - CA ARCserve Backup の asdbapi.dll のデータベースエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4399 2010-12-24 11:48 2008-10-9 Show GitHub Exploit DB Packet Storm
252199 5 警告 CA Technologies - CA ARCserve Backup の asdbapi.dll のテープエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-noinfo
CVE-2008-4398 2010-12-24 11:47 2008-10-9 Show GitHub Exploit DB Packet Storm
252200 10 危険 CA Technologies - CA ARCserve Backup の RPC インターフェイスにおけるディレクトリトラバーサルの脆弱性 CWE-20
CWE-22
CVE-2008-4397 2010-12-24 11:47 2008-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298091 9.1 CRITICAL
Network 		joomla joomla\! Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters. CWE-89
SQL Injection 		CVE-2011-1151 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
298092 6.1 MEDIUM
Network 		bbpress bbpress bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter. CWE-79
Cross-site Scripting 		CVE-2011-1150 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
298093 6.1 MEDIUM
Network 		phpshop phpshop PHPShop through 0.8.1 has XSS. CWE-79
Cross-site Scripting 		CVE-2011-1069 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
298094 6.1 MEDIUM
Network 		vanillaforums vanilla Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. CWE-79
Cross-site Scripting 		CVE-2011-1009 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
298095 9.8 CRITICAL
Network 		smarty
debian 		smarty
debian_linux 		The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. CWE-20
 Improper Input Validation  		CVE-2011-1028 2024-11-21 10:25 2019-11-21 Show GitHub Exploit DB Packet Storm
298096 7.8 HIGH
Local 		unixodbc
debian
opensuse
redhat 		unixodbc
debian_linux
opensuse
enterprise_linux 		The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string. CWE-120
Classic Buffer Overflow 		CVE-2011-1145 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
298097 4.7 MEDIUM
Local 		tesseract_project
debian 		tesseract
debian_linux 		In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file. CWE-59
Link Following 		CVE-2011-1136 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
298098 7.8 HIGH
Local 		v86d_project
debian 		v86d
debian_linux 		v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences. CWE-863
 Incorrect Authorization 		CVE-2011-1070 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
298099 6.1 MEDIUM
Network 		s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/Imag… CWE-79
Cross-site Scripting 		CVE-2011-1135 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm
298100 9.8 CRITICAL
Network 		s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2011-1134 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm