Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252691	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-3660	2011-12-22 15:41	2011-12-20	Show	GitHub Exploit DB Packet Storm

252692	7.5	危険	Mozilla Foundation	-	複数の Mozilla 製品の SVG 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3658	2011-12-22 15:40	2011-12-20	Show	GitHub Exploit DB Packet Storm

252693	6.8	警告	アップル	-	Apple QuickTime における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3228	2011-12-22 15:24	2011-10-14	Show	GitHub Exploit DB Packet Storm

252694	4.3	警告	アップル	-	Apple QuickTime における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3220	2011-12-22 15:09	2011-10-14	Show	GitHub Exploit DB Packet Storm

252695	2.6	注意	アップル	-	Apple QuickTime Player におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3218	2011-12-22 15:02	2011-10-14	Show	GitHub Exploit DB Packet Storm

252696	7.2	危険	マイクロソフト	-	Microsoft Windows における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3408	2011-12-22 14:44	2011-12-13	Show	GitHub Exploit DB Packet Storm

252697	4.7	警告	BlackBerry	-	RIM BlackBerry Desktop Software における .ipd ファイルを復号される脆弱性	CWE-310 暗号の問題	CVE-2010-3741	2011-12-22 12:06	2010-10-5	Show	GitHub Exploit DB Packet Storm

252698	9.3	危険	BlackBerry	-	RIM BlackBerry Enterprise Server および BlackBerry Professional Software におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4778	2011-12-22 12:05	2009-12-1	Show	GitHub Exploit DB Packet Storm

252699	5	警告	BlackBerry	-	BlackBerry 8800 上の RIM BlackBerry Browser におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3944	2011-12-22 12:04	2009-11-16	Show	GitHub Exploit DB Packet Storm

252700	4.3	警告	PukiWiki Plus!	-	PukiWiki Plus! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3990	2011-12-22 12:03	2011-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246661	8.8	HIGH Network	liblouis canonical opensuse	liblouis ubuntu_linux leap	Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.	CWE-787 Out-of-bounds Write	CVE-2018-11683	2024-11-21 12:43	2018-06-4	Show	GitHub Exploit DB Packet Storm

246662	6.5	MEDIUM Network	cmseasy	cmseasy	An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is…	CWE-352 Origin Validation Error	CVE-2018-11680	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246663	8.8	HIGH Network	cmseasy	cmseasy	An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin.	CWE-352 Origin Validation Error	CVE-2018-11679	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246664	9.8	CRITICAL Network	lutron	stanza_firmware radiora_2_firmware homeworks_qs_firmware	Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revisio…	CWE-798 Use of Hard-coded Credentials	CVE-2018-11682	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246665	9.8	CRITICAL Network	lutron	stanza_firmware radiora_2_firmware homeworks_qs_firmware	Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron …	CWE-798 Use of Hard-coded Credentials	CVE-2018-11681	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246666	9.8	CRITICAL Network	lutron	stanza_firmware radiora_2_firmware homeworks_qs_firmware	Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWor…	CWE-798 Use of Hard-coded Credentials	CVE-2018-11629	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246667	4.8	MEDIUM Network	pagekit	pagekit	Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG f…	CWE-79 Cross-site Scripting	CVE-2018-11564	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246668	6.1	MEDIUM Network	yosoro_project	yosoro	Yosoro 1.0.4 has stored XSS.	CWE-79 Cross-site Scripting	CVE-2018-11522	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246669	8.8	HIGH Network	searchblox	searchblox	servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST parameters because of CSRF Token Bypass.	CWE-352 Origin Validation Error	CVE-2018-11538	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

246670	8.8	HIGH Network	njtech	greencms	An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle.	CWE-352 Origin Validation Error	CVE-2018-11671	2024-11-21 12:43	2018-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed