Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252211 7.5 危険 Curtiss Grymala - CAG CMS の click.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4857 2012-02-9 11:03 2011-10-5 Show GitHub Exploit DB Packet Storm
252212 7.5 危険 ASP indir - xWeblog の arsiv.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4856 2012-02-9 11:03 2011-10-5 Show GitHub Exploit DB Packet Storm
252213 7.5 危険 ASP indir - xWeblog の oku.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4855 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
252214 6.8 警告 Zuitu - Zuitu の ajax/coupon.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4854 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
252215 7.5 危険 Chill Creations - Joomla! 用 ccInvoices コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4853 2012-02-9 11:01 2011-10-5 Show GitHub Exploit DB Packet Storm
252216 7.5 危険 Netshine Software - Joomla! 用 nBill コンポーネントの netinvoice.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7302 2012-02-9 11:01 2008-06-27 Show GitHub Exploit DB Packet Storm
252217 7.5 危険 Sclek - jSite の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7301 2012-02-9 11:00 2011-10-5 Show GitHub Exploit DB Packet Storm
252218 8.5 危険 サン・マイクロシステムズ - Sun Solaris および OpenSolaris における MAC のポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7300 2012-02-9 10:59 2011-10-5 Show GitHub Exploit DB Packet Storm
252219 2.1 注意 Apache Software Foundation - Apache JServ における JDBC パスワードまたはその他の重要な情報を見つけられる脆弱性 CWE-16
環境設定
CVE-2000-1247 2012-02-9 10:58 2011-10-5 Show GitHub Exploit DB Packet Storm
252220 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1007 2012-02-8 16:35 2012-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246701 5.5 MEDIUM
Local
espruino espruino Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by addin… CWE-476
 NULL Pointer Dereference
CVE-2018-11591 2024-11-21 12:43 2018-06-1 Show GitHub Exploit DB Packet Storm
246702 5.5 MEDIUM
Local
espruino espruino Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack… CWE-190
 Integer Overflow or Wraparound
CVE-2018-11590 2024-11-21 12:43 2018-06-1 Show GitHub Exploit DB Packet Storm
246703 6.1 MEDIUM
Network
seacms seacms SeaCMS 6.61 has stored XSS in admin_collect.php via the siteurl parameter. CWE-79
Cross-site Scripting
CVE-2018-11583 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm
246704 5.4 MEDIUM
Network
multidots mass_pages\/posts_creator An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. Any logged in user can launch Mass Pages/Posts creation with custom conte… CWE-79
Cross-site Scripting
CVE-2018-11580 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm
246705 5.3 MEDIUM
Network
multidots woocommerce_category_banner_management class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nop… CWE-287
Improper Authentication
CVE-2018-11579 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm
246706 6.5 MEDIUM
Network
miniupnp_project ngiflib GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-11578 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm
246707 8.8 HIGH
Network
liblouis
canonical
opensuse
liblouis
ubuntu_linux
leap
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. CWE-120
Classic Buffer Overflow
CVE-2018-11577 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm
246708 9.8 CRITICAL
Network
miniupnp_project ngiflib ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor. CWE-125
Out-of-bounds Read
CVE-2018-11576 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm
246709 9.8 CRITICAL
Network
miniupnp_project ngiflib ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg. CWE-787
 Out-of-bounds Write
CVE-2018-11575 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm
246710 5.4 MEDIUM
Network
clippercms clippercms ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit" action to the manager/ URI. CWE-79
Cross-site Scripting
CVE-2018-11572 2024-11-21 12:43 2018-05-31 Show GitHub Exploit DB Packet Storm