Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252261 7.2 危険 Schneider Electric - 複数の Schneider Electric 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3330 2011-11-14 12:23 2011-09-21 Show GitHub Exploit DB Packet Storm
252262 5 警告 Mozilla Foundation - Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2011-3653 2011-11-14 11:45 2011-11-8 Show GitHub Exploit DB Packet Storm
252263 2.6 注意 Mozilla Foundation - Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2011-3649 2011-11-14 11:39 2011-11-8 Show GitHub Exploit DB Packet Storm
252264 10 危険 アドビシステムズ - Adobe Shockwave Player の TextXtra モジュールにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2449 2011-11-14 11:36 2011-11-8 Show GitHub Exploit DB Packet Storm
252265 10 危険 アドビシステムズ - Adobe Shockwave Player の DIRapi ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2448 2011-11-14 11:35 2011-11-8 Show GitHub Exploit DB Packet Storm
252266 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2447 2011-11-14 11:34 2011-11-8 Show GitHub Exploit DB Packet Storm
252267 10 危険 アドビシステムズ - Adobe Shockwave Player の DIRapi ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2446 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
252268 9.3 危険 マイクロソフト - Microsoft Windows の Windows Mail および Windows Meeting Space における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-2016 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
252269 9 危険 マイクロソフト - Microsoft Windows の LDAP over SSL 実装における証明書の制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-2014 2011-11-14 11:22 2011-11-8 Show GitHub Exploit DB Packet Storm
252270 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-2013 2011-11-14 11:21 2011-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247301 3.3 LOW
Local 		libmenu-cache_project libmenu-cache Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability). CWE-20
 Improper Input Validation  		CVE-2017-8933 2024-11-21 12:35 2017-05-15 Show GitHub Exploit DB Packet Storm
247302 8.8 HIGH
Network 		simpleinvoices simple_invoices Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for requests that can (1) create new administ… CWE-352
 Origin Validation Error 		CVE-2017-8930 2024-11-21 12:35 2017-05-15 Show GitHub Exploit DB Packet Storm
247303 7.5 HIGH
Network 		virustotal yara The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule. CWE-416
 Use After Free 		CVE-2017-8929 2024-11-21 12:35 2017-05-15 Show GitHub Exploit DB Packet Storm
247304 4.3 MEDIUM
Network 		openstack swift In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these log… CWE-200
Information Exposure 		CVE-2017-8761 2024-11-21 12:34 2021-06-2 Show GitHub Exploit DB Packet Storm
247305 8.8 HIGH
Adjacent 		dlink dcs-1100_firmware
dcs-1130_firmware 		An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device provide a username and password. However, the device allows D-Link apps on the… CWE-255
Credentials Management 		CVE-2017-8417 2024-11-21 12:34 2019-07-3 Show GitHub Exploit DB Packet Storm
247306 7.2 HIGH
Network 		open-xchange ox_cloud Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization. CWE-285
Improper Authorization 		CVE-2017-8777 2024-11-21 12:34 2019-05-23 Show GitHub Exploit DB Packet Storm
247307 5.4 MEDIUM
Network 		synacor zimbra_collaboration_suite Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS. CWE-79
Cross-site Scripting 		CVE-2017-8783 2024-11-21 12:34 2018-02-4 Show GitHub Exploit DB Packet Storm
247308 7.8 HIGH
Local 		cisecurity cis-cat_pro_dashboard In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administrative user's e-mail address and send a forgot password email to themselves, the… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2017-8916 2024-11-21 12:34 2018-02-1 Show GitHub Exploit DB Packet Storm
247309 5.4 MEDIUM
Network 		synocor zimbra_collaboration_suite Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Sho… CWE-79
Cross-site Scripting 		CVE-2017-8802 2024-11-21 12:34 2018-01-17 Show GitHub Exploit DB Packet Storm
247310 5.9 MEDIUM
Network 		cognitoys stemosaur_firmware Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB mode to encrypt voice traffic between the device and remote server, allowing a malicious user to map e… NVD-CWE-noinfo
CVE-2017-8867 2024-11-21 12:34 2017-12-12 Show GitHub Exploit DB Packet Storm