Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252461 4 警告 David Azoulay - Web File Browser の webFileBrowser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4831 2011-12-19 13:43 2011-12-15 Show GitHub Exploit DB Packet Storm
252462 7.5 危険 e4j Extensions for Joomla - Joomla! 用 Vik Real Estate コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4823 2011-12-19 11:52 2011-12-15 Show GitHub Exploit DB Packet Storm
252463 3.5 注意 Barter Sites - Joomla! 用 Barter Sites の com_listing コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4830 2011-12-19 11:51 2011-12-15 Show GitHub Exploit DB Packet Storm
252464 7.5 危険 Barter Sites - Joomla! 用 Barter Sites の com_listing コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4829 2011-12-19 11:50 2011-12-15 Show GitHub Exploit DB Packet Storm
252465 7.5 危険 AutoSec Tools - AutoSec Tools V-CMS のファイルアップロードにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-4828 2011-12-19 11:49 2011-11-27 Show GitHub Exploit DB Packet Storm
252466 4.3 警告 AutoSec Tools - AutoSec Tools V-CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4827 2011-12-19 11:39 2011-12-15 Show GitHub Exploit DB Packet Storm
252467 6.8 警告 AutoSec Tools - AutoSec Tools V-CMS の session.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4826 2011-12-19 11:30 2011-12-15 Show GitHub Exploit DB Packet Storm
252468 4.3 警告 Google - Google Chrome のソースビュー機能における URL バーを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3907 2011-12-16 16:12 2011-12-13 Show GitHub Exploit DB Packet Storm
252469 7.5 危険 Google - Google Chrome の FileWatcher におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3917 2011-12-16 16:08 2011-12-13 Show GitHub Exploit DB Packet Storm
252470 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー
CVE-2011-3916 2011-12-16 16:07 2011-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246761 9.8 CRITICAL
Network
b3log symphony b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-10469 2024-11-21 12:41 2018-04-27 Show GitHub Exploit DB Packet Storm
246762 5.9 MEDIUM
Network
google
redhat
oracle
guava
virtualization_host
virtualization
openshift_container_platform
satellite
openstack
satellite_capsule
jboss_enterprise_application_platform
flexcube_investor_servicing
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize at… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2018-10237 2024-11-21 12:41 2018-04-27 Show GitHub Exploit DB Packet Storm
246763 7.2 HIGH
Network
d-link dir-615_firmware D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen. CWE-78
OS Command 
CVE-2018-10431 2024-11-21 12:41 2018-04-27 Show GitHub Exploit DB Packet Storm
246764 4.8 MEDIUM
Network
dilicms dilicms An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting->site setting" of admin/index.php. CWE-79
Cross-site Scripting
CVE-2018-10430 2024-11-21 12:41 2018-04-27 Show GitHub Exploit DB Packet Storm
246765 9.8 CRITICAL
Network
cosmocms cosmo Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php. CWE-94
Code Injection
CVE-2018-10429 2024-11-21 12:41 2018-04-27 Show GitHub Exploit DB Packet Storm
246766 7.8 HIGH
Local
hz-soft security_guard An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently termin… NVD-CWE-noinfo
CVE-2018-10425 2024-11-21 12:41 2018-04-26 Show GitHub Exploit DB Packet Storm
246767 2.7 LOW
Network
1234n minicms mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field. CWE-200
Information Exposure
CVE-2018-10424 2024-11-21 12:41 2018-04-26 Show GitHub Exploit DB Packet Storm
246768 2.7 LOW
Network
1234n minicms mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article. CWE-200
Information Exposure
CVE-2018-10423 2024-11-21 12:41 2018-04-26 Show GitHub Exploit DB Packet Storm
246769 4.8 MEDIUM
Network
hongcms_project hongcms An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field. CWE-79
Cross-site Scripting
CVE-2018-10422 2024-11-21 12:41 2018-04-26 Show GitHub Exploit DB Packet Storm
246770 7.5 HIGH
Network
xiph.org
debian
redhat
libvorbis
debian_linux
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. CWE-125
Out-of-bounds Read
CVE-2018-10393 2024-11-21 12:41 2018-04-26 Show GitHub Exploit DB Packet Storm