Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252201	7.5	危険	Likno Software Inc.	-	WordPress 用 Allwebmenus プラグイン内にある actions.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3981	2011-10-11 10:23	2011-10-4	Show	GitHub Exploit DB Packet Storm

252202	6	警告	Jerome Schneider	-	TYPO3 で利用される Drag Drop Mass Upload における任意のファイルをアップロードされる脆弱性	CWE-noinfo 情報不足	CVE-2011-3980	2011-10-11 10:20	2011-07-9	Show	GitHub Exploit DB Packet Storm

252203	4.3	警告	Zikula Foundation	-	Zikula Application Framework の Theme モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3979	2011-10-11 10:18	2011-09-9	Show	GitHub Exploit DB Packet Storm

252204	3.5	注意	LightNEasy	-	LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3978	2011-10-11 10:15	2011-10-4	Show	GitHub Exploit DB Packet Storm

252205	7.2	危険	NoMachine	-	NoMachine NX Node および NX Server の nxconfigure.sh における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2011-3977	2011-10-11 10:13	2011-08-5	Show	GitHub Exploit DB Packet Storm

252206	5	警告	IceWarp, Inc.	-	IceWarp Mail Server の IceWarp WebMail における設定情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3580	2011-10-11 10:11	2011-09-30	Show	GitHub Exploit DB Packet Storm

252207	6.4	警告	IceWarp, Inc.	-	IceWarp Mail Server の server/webmail.php における任意のファイルを読まれる脆弱性	CWE-399 リソース管理の問題	CVE-2011-3579	2011-10-11 10:10	2011-09-30	Show	GitHub Exploit DB Packet Storm

252208	7.5	危険	シマンテック	-	Symantec IM Manager の管理コンソールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0554	2011-10-11 10:10	2011-09-29	Show	GitHub Exploit DB Packet Storm

252209	7.5	危険	シマンテック	-	Symantec IM Manager の管理コンソールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0553	2011-10-11 10:09	2011-09-29	Show	GitHub Exploit DB Packet Storm

252210	4.3	警告	シマンテック	-	Symantec IM Manager の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0552	2011-10-11 10:09	2011-09-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254981	6.1	MEDIUM Network	popcash	popcash.net_code_integration_tool	The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php.	CWE-79 Cross-site Scripting	CVE-2017-15810	2024-11-21 12:15	2017-10-24	Show	GitHub Exploit DB Packet Storm

254982	6.1	MEDIUM Network	phpmyfaq	phpmyfaq	In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.	CWE-79 Cross-site Scripting	CVE-2017-15809	2024-11-21 12:15	2017-10-24	Show	GitHub Exploit DB Packet Storm

254983	8.8	HIGH Network	phpmyfaq	phpmyfaq	In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.	CWE-352 Origin Validation Error	CVE-2017-15808	2024-11-21 12:15	2017-10-24	Show	GitHub Exploit DB Packet Storm

254984	7.5	HIGH Network	cisco	small_business_sa520_firmware small_business_sa540_firmware	Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files.	CWE-22 Path Traversal	CVE-2017-15805	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

254985	6.1	MEDIUM Network	logitech	media_server	DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.	CWE-79 Cross-site Scripting	CVE-2017-15687	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

254986	9.8	CRITICAL Network	gnu	glibc	The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15804	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

254987	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x000000…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15789	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

254988	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x000000…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15788	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

254989	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15787	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

254990	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15786	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed