Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252841 7.2 危険 Schneider Electric - 複数の Schneider Electric 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3330 2011-11-14 12:23 2011-09-21 Show GitHub Exploit DB Packet Storm
252842 5 警告 Mozilla Foundation - Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2011-3653 2011-11-14 11:45 2011-11-8 Show GitHub Exploit DB Packet Storm
252843 2.6 注意 Mozilla Foundation - Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2011-3649 2011-11-14 11:39 2011-11-8 Show GitHub Exploit DB Packet Storm
252844 10 危険 アドビシステムズ - Adobe Shockwave Player の TextXtra モジュールにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2449 2011-11-14 11:36 2011-11-8 Show GitHub Exploit DB Packet Storm
252845 10 危険 アドビシステムズ - Adobe Shockwave Player の DIRapi ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2448 2011-11-14 11:35 2011-11-8 Show GitHub Exploit DB Packet Storm
252846 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2447 2011-11-14 11:34 2011-11-8 Show GitHub Exploit DB Packet Storm
252847 10 危険 アドビシステムズ - Adobe Shockwave Player の DIRapi ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2446 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
252848 9.3 危険 マイクロソフト - Microsoft Windows の Windows Mail および Windows Meeting Space における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-2016 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
252849 9 危険 マイクロソフト - Microsoft Windows の LDAP over SSL 実装における証明書の制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-2014 2011-11-14 11:22 2011-11-8 Show GitHub Exploit DB Packet Storm
252850 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-2013 2011-11-14 11:21 2011-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258971 5.4 MEDIUM
Network 		netcomm 4gt101w_software
4gt101w_bootloader 		NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in su… CWE-79
Cross-site Scripting 		CVE-2017-11647 2024-11-21 12:08 2017-07-28 Show GitHub Exploit DB Packet Storm
258972 8.8 HIGH
Network 		netcomm 4gt101w_software
4gt101w_bootloader 		NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. The… CWE-352
 Origin Validation Error 		CVE-2017-11646 2024-11-21 12:08 2017-07-28 Show GitHub Exploit DB Packet Storm
258973 9.8 CRITICAL
Network 		netcomm 4gt101w_software
4gt101w_bootloader 		NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or system_config.html. CWE-287
Improper Authentication 		CVE-2017-11645 2024-11-21 12:08 2017-07-28 Show GitHub Exploit DB Packet Storm
258974 7.5 HIGH
Network 		ffmpeg ffmpeg The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted strea… CWE-20
 Improper Input Validation  		CVE-2017-11665 2024-11-21 12:08 2017-07-27 Show GitHub Exploit DB Packet Storm
258975 5.4 MEDIUM
Network 		cacti cacti Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers. CWE-79
Cross-site Scripting 		CVE-2017-11691 2024-11-21 12:08 2017-07-27 Show GitHub Exploit DB Packet Storm
258976 6.1 MEDIUM
Network 		zohocorp manageengine_eventlog_analyzer Multiple Persistent cross-site scripting (XSS) vulnerabilities in Event log parsing and Display functions in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitr… CWE-79
Cross-site Scripting 		CVE-2017-11687 2024-11-21 12:08 2017-07-27 Show GitHub Exploit DB Packet Storm
258977 6.1 MEDIUM
Network 		zohocorp manageengine_eventlog_analyzer Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the p… CWE-79
Cross-site Scripting 		CVE-2017-11686 2024-11-21 12:08 2017-07-27 Show GitHub Exploit DB Packet Storm
258978 6.1 MEDIUM
Network 		zohocorp manageengine_eventlog_analyzer Multiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web… CWE-79
Cross-site Scripting 		CVE-2017-11685 2024-11-21 12:08 2017-07-27 Show GitHub Exploit DB Packet Storm
258979 7.5 HIGH
Network 		libav libav There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input. NVD-CWE-noinfo
CVE-2017-11684 2024-11-21 12:08 2017-07-27 Show GitHub Exploit DB Packet Storm
258980 6.5 MEDIUM
Network 		exiv2
canonical
debian 		exiv2
ubuntu_linux
debian_linux 		There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input. CWE-617
 Reachable Assertion 		CVE-2017-11683 2024-11-21 12:08 2017-07-27 Show GitHub Exploit DB Packet Storm