Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252201	4.3	警告	マイクロソフト	-	Microsoft Anti-Cross Site Scripting Library におけるクロスサイトスクリプティング攻撃の脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0007	2012-01-13 15:51	2012-01-10	Show	GitHub Exploit DB Packet Storm

252202	4.3	警告	Cogent Real-Time Systems Inc.	-	Cogent DataHub における HTTP ヘッダインジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2012-0310	2012-01-13 15:48	2012-01-11	Show	GitHub Exploit DB Packet Storm

252203	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品の Windows Packager 設定における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2012-0013	2012-01-13 15:45	2012-01-10	Show	GitHub Exploit DB Packet Storm

252204	10	危険	Final Draft	-	Final Draft におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-5059	2012-01-12 15:54	2012-01-10	Show	GitHub Exploit DB Packet Storm

252205	6.4	警告	3S-Smart Software Solutions	-	3S CoDeSys における任意のディレクトリを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5058	2012-01-12 15:53	2012-01-10	Show	GitHub Exploit DB Packet Storm

252206	7.8	危険	ヒューレット・パッカード	-	複数の HP 製品の HP-ChaiSOE Web サーバにおけるディレクトリトラバーサルの脆弱性	CWE-200 情報漏えい	CVE-2011-4785	2012-01-11 16:11	2012-01-9	Show	GitHub Exploit DB Packet Storm

252207	5	警告	Apache Software Foundation	-	Apache Struts におけるランタイムデータの値を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5057	2012-01-11 15:17	2012-01-8	Show	GitHub Exploit DB Packet Storm

252208	9.3	危険	Apache Software Foundation	-	Apache Struts における任意のコマンドを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0392	2012-01-11 15:11	2012-01-8	Show	GitHub Exploit DB Packet Storm

252209	9.3	危険	Apache Software Foundation	-	Apache Struts における任意の Java コードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-0391	2012-01-11 14:57	2012-01-8	Show	GitHub Exploit DB Packet Storm

252210	5	警告	Wibu-Systems AG	-	CodeMeter Runtime におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-4057	2012-01-11 14:02	2012-01-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246811	4.8	MEDIUM Network	ultimatemember	user_profile_\&_membership	Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=um_opti…	CWE-79 Cross-site Scripting	CVE-2018-10234	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246812	8.8	HIGH Network	ultimatemember	user_profile_\&_membership	The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin.	CWE-352 Origin Validation Error	CVE-2018-10233	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246813	7.5	HIGH Network	beauty	beauty_ecosystem_coin	An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used in the Beauty Chain economic system, allows attacke…	CWE-190 Integer Overflow or Wraparound	CVE-2018-10299	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246814	5.4	MEDIUM Network	discuz	discuzx	Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.	CWE-79 Cross-site Scripting	CVE-2018-10298	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246815	5.4	MEDIUM Network	discuz	discuzx	Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images.	CWE-79 Cross-site Scripting	CVE-2018-10297	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246816	6.1	MEDIUM Network	1234n	minicms	MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.	CWE-79 Cross-site Scripting	CVE-2018-10296	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246817	8.8	HIGH Network	chemcms_project	chemcms	ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.	CWE-352 Origin Validation Error	CVE-2018-10295	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246818	8.8	HIGH Network	ericssonlg	ipecs_nms	The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certa…	CWE-522 Insufficiently Protected Credentials	CVE-2018-10286	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246819	9.8	CRITICAL Network	ericssonlg	ipecs_nms	The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-10285	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246820	5.5	MEDIUM Local	artifex debian	mupdf debian_linux	In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pd…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-10289	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed