Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252241 7.5 危険 Electric Sheep Fencing - pfSense における証明書を作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4197 2012-01-6 15:21 2011-12-20 Show GitHub Exploit DB Packet Storm
252242 4.3 警告 Splunk - Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4778 2012-01-5 16:29 2011-12-12 Show GitHub Exploit DB Packet Storm
252243 9.3 危険 Splunk - Splunk における任意のファイルを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2011-4644 2012-01-5 16:28 2012-01-3 Show GitHub Exploit DB Packet Storm
252244 4 警告 Splunk - Splunk におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4643 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
252245 4.6 警告 Splunk - Splunk の Splunk Web 内にある mappy.py における任意のコードを実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4642 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
252246 6.8 警告 Mozilla Foundation - Bugzilla の attachment.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3669 2012-01-5 16:26 2011-11-20 Show GitHub Exploit DB Packet Storm
252247 6.8 警告 Mozilla Foundation - Bugzilla の post_bug.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3668 2012-01-5 16:26 2011-11-20 Show GitHub Exploit DB Packet Storm
252248 6.8 警告 Mozilla Foundation - Bugzilla の User.offer_account_by_email の WebService メソッドにおける脆弱性 CWE-287
不適切な認証 		CVE-2011-3667 2012-01-5 16:23 2011-12-17 Show GitHub Exploit DB Packet Storm
252249 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3657 2012-01-5 16:21 2011-10-27 Show GitHub Exploit DB Packet Storm
252250 9.3 危険 Steve Baker - PLIB の util/ulError.cxx 内の ulSetError 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4620 2012-01-5 16:21 2011-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301801 - chyrp chyrp upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2745 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301802 - mega-nerd libsndfile Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file th… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2696 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301803 - drupal drupal Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2687 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301804 - videolan vlc_media_player Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (applicati… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2588 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301805 - joomla joomla\! Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as dem… CWE-79
Cross-site Scripting 		CVE-2011-2509 2024-11-21 10:28 2011-07-28 Show GitHub Exploit DB Packet Storm
301806 - videolan vlc_media_player Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (app… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2587 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301807 - nrl opie opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already … CWE-20
 Improper Input Validation  		CVE-2011-2490 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301808 - nrl opie Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line. CWE-189
Numeric Errors 		CVE-2011-2489 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301809 - likewise likewise_open SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands v… CWE-89
SQL Injection 		CVE-2011-2467 2024-11-21 10:28 2011-07-27 Show GitHub Exploit DB Packet Storm
301810 - libreoffice libreoffice Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2685 2024-11-21 10:28 2011-07-22 Show GitHub Exploit DB Packet Storm