Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252621	6.5	警告	IBM	-	IBM WebSphere Application Server の AuthCache パージ実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1321	2011-04-7 15:38	2010-10-18	Show	GitHub Exploit DB Packet Storm

252622	5	警告	IBM	-	IBM WebSphere Application Server の com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1317	2011-04-7 15:35	2010-07-29	Show	GitHub Exploit DB Packet Storm

252623	5	警告	IBM	-	IBM WebSphere Application Server の org.apache.jasper.runtime.JspWriterImpl.response におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1318	2011-04-7 15:25	2010-09-22	Show	GitHub Exploit DB Packet Storm

252624	5	警告	IBM	-	IBM WebSphere Application Server の Session Initiation Protocol におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1316	2011-04-7 15:23	2010-09-23	Show	GitHub Exploit DB Packet Storm

252625	5	警告	IBM	-	IBM WebSphere Application Server のメッセージングエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1315	2011-04-7 15:21	2010-09-30	Show	GitHub Exploit DB Packet Storm

252626	5	警告	IBM	-	IBM WebSphere Application Server の Service Integration Bus メッセージングエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1314	2011-04-7 15:19	2010-08-4	Show	GitHub Exploit DB Packet Storm

252627	4	警告	IBM	-	IBM WebSphere Application Server の管理コンソールコンポーネントにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1312	2011-04-7 15:15	2009-06-11	Show	GitHub Exploit DB Packet Storm

252628	4	警告	サイバートラスト株式会社レッドハット	-	vsftpd の vsf_filename_passes_filter 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0762	2011-04-7 14:31	2011-03-2	Show	GitHub Exploit DB Packet Storm

252629	6	警告	IBM	-	IBM WebSphere Application Server のセキュリティコンポーネントにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1311	2011-04-7 14:28	2010-10-28	Show	GitHub Exploit DB Packet Storm

252630	5	警告	レッドハット	-	Linux SCSI target framework の iscsi_rx_handler 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0001	2011-04-7 14:24	2011-03-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274251	-	websense	v-series_appliances triton	Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject …	CWE-79 Cross-site Scripting	CVE-2015-2747	2024-11-21 11:27	2015-03-26	Show	GitHub Exploit DB Packet Storm

274252	-	websense	v-series_appliances triton	The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticat…	CWE-77 Command Injection	CVE-2015-2746	2024-11-21 11:27	2015-03-26	Show	GitHub Exploit DB Packet Storm

274253	-	citrix	command_center	Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execut…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-2683	2024-11-21 11:27	2015-03-26	Show	GitHub Exploit DB Packet Storm

274254	-	citrix	command_center	Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.	CWE-17 Code	CVE-2015-2682	2024-11-21 11:27	2015-03-26	Show	GitHub Exploit DB Packet Storm

274255	-	websense	triton_ap_web v-series_appliances	Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via the (1) ws-use…	CWE-79 Cross-site Scripting	CVE-2015-2703	2024-11-21 11:27	2015-03-25	Show	GitHub Exploit DB Packet Storm

274256	-	websense	triton_ap_data triton_ap_web v-series_appliances triton_ap_email	Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitr…	CWE-79 Cross-site Scripting	CVE-2015-2702	2024-11-21 11:27	2015-03-25	Show	GitHub Exploit DB Packet Storm

274257	-	cs-cart	cs-cart	Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-updat…	CWE-352 Origin Validation Error	CVE-2015-2701	2024-11-21 11:27	2015-03-25	Show	GitHub Exploit DB Packet Storm

274258	-	debian drupal	debian_linux drupal	Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a craf…	CWE-284 Improper Access Control	CVE-2015-2559	2024-11-21 11:27	2015-03-25	Show	GitHub Exploit DB Packet Storm

274259	-	fedoraproject debian opensuse djangoproject oracle canonical	fedora debian_linux opensuse django solaris ubuntu_linux	The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to c…	CWE-79 Cross-site Scripting	CVE-2015-2317	2024-11-21 11:27	2015-03-25	Show	GitHub Exploit DB Packet Storm

274260	-	oracle djangoproject fedoraproject canonical opensuse	solaris django fedora ubuntu_linux opensuse	The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of servi…	CWE-399 Resource Management Errors	CVE-2015-2316	2024-11-21 11:27	2015-03-25	Show	GitHub Exploit DB Packet Storm