Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252611	4.3	警告	Zabbix	-	Zabbix における複数のクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4615	2012-01-5 10:48	2011-08-4	Show	GitHub Exploit DB Packet Storm

252612	10	危険	ヒューレット・パッカード	-	HP Database Archiving Software における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4165	2012-01-5 10:47	2011-12-22	Show	GitHub Exploit DB Packet Storm

252613	10	危険	ヒューレット・パッカード	-	HP Database Archiving Software における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4164	2012-01-5 10:46	2011-12-22	Show	GitHub Exploit DB Packet Storm

252614	10	危険	ヒューレット・パッカード	-	HP Database Archiving Software における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4163	2012-01-5 10:44	2011-12-22	Show	GitHub Exploit DB Packet Storm

252615	4.3	警告	Yaws	-	Yaws の wiki アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5025	2012-01-5 10:21	2011-12-29	Show	GitHub Exploit DB Packet Storm

252616	4.3	警告	GNU Project	-	Mailman 用の Mailman/htdig integration patch の mmsearch/design におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5024	2012-01-5 10:21	2011-12-29	Show	GitHub Exploit DB Packet Storm

252617	4.3	警告	Pligg	-	Pligg CMS の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5023	2012-01-5 10:17	2011-12-29	Show	GitHub Exploit DB Packet Storm

252618	7.5	危険	Pligg	-	Pligg CMS の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5022	2012-01-5 10:16	2011-12-29	Show	GitHub Exploit DB Packet Storm

252619	4.3	警告	Winn GuestBook	-	Winn GuestBook におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5026	2012-01-5 10:16	2011-12-27	Show	GitHub Exploit DB Packet Storm

252620	7.5	危険	PHPIDS	-	PHPIDS におけるルールセット回避の脆弱性	CWE-94 コード・インジェクション	CVE-2011-5021	2012-01-5 10:15	2011-12-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246631	8.1	HIGH Network	sensiolabs debian fedoraproject	symfony debian_linux fedora	An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerabil…	CWE-384 Session Fixation	CVE-2018-11385	2024-11-21 12:43	2018-06-14	Show	GitHub Exploit DB Packet Storm

246632	5.3	MEDIUM Network	splunk	splunk	Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.	CWE-200 Information Exposure	CVE-2018-11409	2024-11-21 12:43	2018-06-8	Show	GitHub Exploit DB Packet Storm

246633	6.1	MEDIUM Network	sgin	xiangyun_platform	SGIN.CN xiangyun platform V9.4.10 has XSS via the login_url parameter to /login.php.	CWE-79 Cross-site Scripting	CVE-2018-11553	2024-11-21 12:43	2018-06-6	Show	GitHub Exploit DB Packet Storm

246634	9.8	CRITICAL Network	searchblox	searchblox	XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a …	CWE-611 CWE-918 XXE Server-Side Request Forgery (SSRF)	CVE-2018-11586	2024-11-21 12:43	2018-06-6	Show	GitHub Exploit DB Packet Storm

246635	9.8	CRITICAL Network	mruby debian	mruby debian_linux	The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and appli…	CWE-824 Access of Uninitialized Pointer	CVE-2018-11743	2024-11-21 12:43	2018-06-5	Show	GitHub Exploit DB Packet Storm

246636	9.8	CRITICAL Network	wuzhicms	wuzhicms	WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UC_KEY' is hard coded.	CWE-89 SQL Injection	CVE-2018-11722	2024-11-21 12:43	2018-06-5	Show	GitHub Exploit DB Packet Storm

246637	8.1	HIGH Network	sleuthkit	the_sleuth_kit	An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tsk_UTF16toUTF8 in tsk/base/tsk…	CWE-125 Out-of-bounds Read	CVE-2018-11740	2024-11-21 12:43	2018-06-5	Show	GitHub Exploit DB Packet Storm

246638	8.1	HIGH Network	sleuthkit	the_sleuth_kit	An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function raw_read in tsk/img/raw.c which …	CWE-125 Out-of-bounds Read	CVE-2018-11739	2024-11-21 12:43	2018-06-5	Show	GitHub Exploit DB Packet Storm

246639	8.1	HIGH Network	sleuthkit	the_sleuth_kit	An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_make_data_run in tsk/fs/ntfs…	CWE-125 Out-of-bounds Read	CVE-2018-11738	2024-11-21 12:43	2018-06-5	Show	GitHub Exploit DB Packet Storm

246640	8.1	HIGH Network	sleuthkit	the_sleuth_kit	An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_de…	CWE-125 Out-of-bounds Read	CVE-2018-11737	2024-11-21 12:43	2018-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed