Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252461 4 警告 David Azoulay - Web File Browser の webFileBrowser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4831 2011-12-19 13:43 2011-12-15 Show GitHub Exploit DB Packet Storm
252462 7.5 危険 e4j Extensions for Joomla - Joomla! 用 Vik Real Estate コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4823 2011-12-19 11:52 2011-12-15 Show GitHub Exploit DB Packet Storm
252463 3.5 注意 Barter Sites - Joomla! 用 Barter Sites の com_listing コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4830 2011-12-19 11:51 2011-12-15 Show GitHub Exploit DB Packet Storm
252464 7.5 危険 Barter Sites - Joomla! 用 Barter Sites の com_listing コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4829 2011-12-19 11:50 2011-12-15 Show GitHub Exploit DB Packet Storm
252465 7.5 危険 AutoSec Tools - AutoSec Tools V-CMS のファイルアップロードにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4828 2011-12-19 11:49 2011-11-27 Show GitHub Exploit DB Packet Storm
252466 4.3 警告 AutoSec Tools - AutoSec Tools V-CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4827 2011-12-19 11:39 2011-12-15 Show GitHub Exploit DB Packet Storm
252467 6.8 警告 AutoSec Tools - AutoSec Tools V-CMS の session.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4826 2011-12-19 11:30 2011-12-15 Show GitHub Exploit DB Packet Storm
252468 4.3 警告 Google - Google Chrome のソースビュー機能における URL バーを偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3907 2011-12-16 16:12 2011-12-13 Show GitHub Exploit DB Packet Storm
252469 7.5 危険 Google - Google Chrome の FileWatcher におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3917 2011-12-16 16:08 2011-12-13 Show GitHub Exploit DB Packet Storm
252470 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3916 2011-12-16 16:07 2011-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246741 6.1 MEDIUM
Network 		doorkeeper_project doorkeeper Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth … CWE-79
Cross-site Scripting 		CVE-2018-1000088 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246742 8.8 HIGH
Network 		npr pym.js NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1 contains a Cross ite Request Forgery (CSRF) vulnerability in Pym.js _onNavigateToMessage function. https://github.com/nprapps/pym.js/blob/ma… CWE-352
 Origin Validation Error 		CVE-2018-1000086 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246743 5.5 MEDIUM
Local 		clamav
debian
canonical 		clamav
debian_linux
ubuntu_linux 		ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in developing exploit cha… CWE-125
Out-of-bounds Read 		CVE-2018-1000085 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246744 5.4 MEDIUM
Network 		wolfcms wolf_cms WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege user can steal the cookie of admin user … CWE-79
Cross-site Scripting 		CVE-2018-1000084 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246745 5.3 MEDIUM
Network 		ajenti ajenti Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via… CWE-22
Path Traversal 		CVE-2018-1000083 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246746 8.8 HIGH
Network 		ajenti ajenti Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the serve… CWE-352
 Origin Validation Error 		CVE-2018-1000082 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246747 7.5 HIGH
Network 		ajenti ajenti Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can… CWE-20
 Improper Input Validation  		CVE-2018-1000081 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246748 6.5 MEDIUM
Network 		ajenti ajenti Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user. This attack appear to be exploitable … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-1000080 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246749 5.5 MEDIUM
Local 		rubygems rubygems RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains… CWE-22
Path Traversal 		CVE-2018-1000079 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm
246750 6.1 MEDIUM
Network 		rubygems
debian 		rubygems
debian_linux 		RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains… CWE-79
Cross-site Scripting 		CVE-2018-1000078 2024-11-21 12:39 2018-03-14 Show GitHub Exploit DB Packet Storm