Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252261	4.9	警告	WinMount	-	WinMount の WMDrive.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-5032	2012-01-5 14:20	2011-12-29	Show	GitHub Exploit DB Packet Storm

252262	7.5	危険	Shilpi Computers Limited.	-	cApexWEB の servlet/capexweb.parentvalidatepassword における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5031	2012-01-5 14:19	2011-12-29	Show	GitHub Exploit DB Packet Storm

252263	3.5	注意	valthebald	-	Drupal 用 Meta tags quick モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5030	2012-01-5 14:18	2011-12-14	Show	GitHub Exploit DB Packet Storm

252264	4.3	警告	Alexander Palmo	-	Simple PHP Blog におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5029	2012-01-5 11:07	2011-12-29	Show	GitHub Exploit DB Packet Storm

252265	4	警告	Novell	-	Novell Sentinel Log Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-5028	2012-01-5 10:49	2011-12-29	Show	GitHub Exploit DB Packet Storm

252266	4.3	警告	Zabbix	-	Zabbix におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5027	2012-01-5 10:49	2011-08-4	Show	GitHub Exploit DB Packet Storm

252267	4.3	警告	Zabbix	-	Zabbix における複数のクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4615	2012-01-5 10:48	2011-08-4	Show	GitHub Exploit DB Packet Storm

252268	10	危険	ヒューレット・パッカード	-	HP Database Archiving Software における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4165	2012-01-5 10:47	2011-12-22	Show	GitHub Exploit DB Packet Storm

252269	10	危険	ヒューレット・パッカード	-	HP Database Archiving Software における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4164	2012-01-5 10:46	2011-12-22	Show	GitHub Exploit DB Packet Storm

252270	10	危険	ヒューレット・パッカード	-	HP Database Archiving Software における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4163	2012-01-5 10:44	2011-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254411	7.8	HIGH Local	linux	linux_kernel	In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by lever…	CWE-416 Use After Free	CVE-2017-18218	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254412	6.1	MEDIUM Network	invoiceplane	invoiceplane	An issue was discovered in InvoicePlane before 1.5.5. It was observed that the Email address and Web address parameters are vulnerable to Cross Site Scripting, related to application/modules/clients/…	CWE-79 Cross-site Scripting	CVE-2017-18217	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254413	5.5	MEDIUM Local	linux	linux_kernel	In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used.	CWE-476 NULL Pointer Dereference	CVE-2017-18216	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254414	9.8	CRITICAL Network	xv_project opensuse	xv leap	xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value.	CWE-787 Out-of-bounds Write	CVE-2017-18215	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254415	7.5	HIGH Network	momentjs tenable	moment nessus	The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.	CWE-400 Uncontrolled Resource Consumption	CVE-2017-18214	2024-11-21 12:19	2018-03-5	Show	GitHub Exploit DB Packet Storm

254416	7.2	HIGH Network	exponentcms	exponent_cms	In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.	NVD-CWE-noinfo	CVE-2017-18213	2024-11-21 12:19	2018-03-4	Show	GitHub Exploit DB Packet Storm

254417	9.8	CRITICAL Network	jerryscript	jerryscript	An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp("[\x0"); payload.	CWE-125 Out-of-bounds Read	CVE-2017-18212	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

254418	9.8	CRITICAL Network	imagemagick canonical	imagemagick ubuntu_linux	In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLK…	CWE-476 NULL Pointer Dereference	CVE-2017-18211	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

254419	9.8	CRITICAL Network	imagemagick	imagemagick	In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.	CWE-476 NULL Pointer Dereference	CVE-2017-18210	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

254420	8.8	HIGH Network	imagemagick canonical	imagemagick ubuntu_linux	In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to Ge…	CWE-476 NULL Pointer Dereference	CVE-2017-18209	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed