Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252351	7.5	危険	Mambo Foundation	-	Mambo CMS の administrator/index2.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-2917	2011-12-13 14:41	2011-12-8	Show	GitHub Exploit DB Packet Storm

252352	6.8	警告	MIT Kerberos	-	MIT Kerberos の process_tgs_req 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1530	2011-12-13 14:40	2011-12-6	Show	GitHub Exploit DB Packet Storm

252353	6.4	警告	BlackBerry	-	BlackBerry Administration API におけるテキストファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2011-0287	2011-12-13 14:35	2011-07-12	Show	GitHub Exploit DB Packet Storm

252354	6.4	警告	Widelands	-	Widelands におけるパストラバーサル攻撃を誘発される脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4675	2011-12-12 18:21	2011-12-5	Show	GitHub Exploit DB Packet Storm

252355	5	警告	One Click Orgs	-	One Click Orgs のパスワードリセット機能におけるユーザアカウントを列挙される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4678	2011-12-12 18:19	2011-12-6	Show	GitHub Exploit DB Packet Storm

252356	4	警告	One Click Orgs	-	One Click Orgs におけるサービス運用妨害 (ログイン障害) の脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4555	2011-12-12 18:18	2011-12-6	Show	GitHub Exploit DB Packet Storm

252357	5.5	警告	One Click Orgs	-	One Click Orgs における巧妙に細工された SMTP トラフィックを誘発する脆弱性	CWE-20 不適切な入力確認	CVE-2011-4554	2011-12-12 18:15	2011-12-6	Show	GitHub Exploit DB Packet Storm

252358	6.9	警告	Celery	-	Celery における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4356	2011-12-12 18:14	2011-12-5	Show	GitHub Exploit DB Packet Storm

252359	7.5	危険	ヒューレット・パッカード	-	HP Protect Tools Device Access Manager における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-4162	2011-12-12 18:13	2011-12-1	Show	GitHub Exploit DB Packet Storm

252360	10	危険	ヒューレット・パッカード	-	HP CM8060 Color MFP その他の製品のデフォルト設定における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4161	2011-12-12 18:10	2011-11-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254411	7.8	HIGH Local	linux	linux_kernel	In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by lever…	CWE-416 Use After Free	CVE-2017-18218	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254412	6.1	MEDIUM Network	invoiceplane	invoiceplane	An issue was discovered in InvoicePlane before 1.5.5. It was observed that the Email address and Web address parameters are vulnerable to Cross Site Scripting, related to application/modules/clients/…	CWE-79 Cross-site Scripting	CVE-2017-18217	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254413	5.5	MEDIUM Local	linux	linux_kernel	In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used.	CWE-476 NULL Pointer Dereference	CVE-2017-18216	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254414	9.8	CRITICAL Network	xv_project opensuse	xv leap	xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value.	CWE-787 Out-of-bounds Write	CVE-2017-18215	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

254415	7.5	HIGH Network	momentjs tenable	moment nessus	The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.	CWE-400 Uncontrolled Resource Consumption	CVE-2017-18214	2024-11-21 12:19	2018-03-5	Show	GitHub Exploit DB Packet Storm

254416	7.2	HIGH Network	exponentcms	exponent_cms	In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.	NVD-CWE-noinfo	CVE-2017-18213	2024-11-21 12:19	2018-03-4	Show	GitHub Exploit DB Packet Storm

254417	9.8	CRITICAL Network	jerryscript	jerryscript	An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp("[\x0"); payload.	CWE-125 Out-of-bounds Read	CVE-2017-18212	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

254418	9.8	CRITICAL Network	imagemagick canonical	imagemagick ubuntu_linux	In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLK…	CWE-476 NULL Pointer Dereference	CVE-2017-18211	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

254419	9.8	CRITICAL Network	imagemagick	imagemagick	In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.	CWE-476 NULL Pointer Dereference	CVE-2017-18210	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

254420	8.8	HIGH Network	imagemagick canonical	imagemagick ubuntu_linux	In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to Ge…	CWE-476 NULL Pointer Dereference	CVE-2017-18209	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm