Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252851 5 警告 camaleo - WordPress 用 myEASYbackup プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-0898 2012-01-25 10:30 2012-01-20 Show GitHub Exploit DB Packet Storm
252852 5 警告 Tom Braider - WordPress 用 Count Per Day モジュールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-0896 2012-01-25 10:23 2012-01-20 Show GitHub Exploit DB Packet Storm
252853 4.3 警告 Tom Braider - WordPress 用 Count Per Day モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0895 2012-01-25 10:21 2012-01-20 Show GitHub Exploit DB Packet Storm
252854 9.3 危険 IBM - IBM Lotus Symphony の vclmi.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-0192 2012-01-24 16:45 2012-01-23 Show GitHub Exploit DB Packet Storm
252855 7.5 危険 アドビシステムズ
Linux
- Linux 上で稼働する Adobe Reader における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-4374 2012-01-24 16:29 2011-09-13 Show GitHub Exploit DB Packet Storm
252856 5 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0193 2012-01-24 16:21 2012-01-17 Show GitHub Exploit DB Packet Storm
252857 10 危険 IBM - IBM Rational License Key Server その他の製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1389 2012-01-24 16:19 2012-01-19 Show GitHub Exploit DB Packet Storm
252858 10 危険 フレクセラ・ソフトウェア合同会社 - Flexera FlexNet Publisher の lmgrd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4135 2012-01-24 16:02 2011-08-16 Show GitHub Exploit DB Packet Storm
252859 10 危険 フレクセラ・ソフトウェア合同会社 - Flexera FlexNet Publisher の lmadmin におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4134 2012-01-24 15:42 2011-08-3 Show GitHub Exploit DB Packet Storm
252860 2.1 注意 フレクセラ・ソフトウェア合同会社 - Flexera Macrovision InstallShield における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-6744 2012-01-24 15:32 2007-05-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264371 5.3 MEDIUM
Network
fullworks stop_user_enumeration Stop User Enumeration 1.3.8 allows user enumeration via the REST API CWE-200
Information Exposure
CVE-2017-1000226 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264372 6.1 MEDIUM
Network
relevanssi relevanssi Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anything an admin can CWE-79
Cross-site Scripting
CVE-2017-1000225 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264373 5.4 MEDIUM
Network
modx modx_revolution A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious Java… CWE-79
Cross-site Scripting
CVE-2017-1000223 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264374 5.4 MEDIUM
Network
tine20 tine_2.0 Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation CWE-79
Cross-site Scripting
CVE-2017-1000164 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264375 5.4 MEDIUM
Network
expressionengine expressionengine EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection CWE-79
Cross-site Scripting
CVE-2017-1000160 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264376 9.8 CRITICAL
Network
python
debian
python
debian_linux
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code ex… CWE-190
 Integer Overflow or Wraparound
CVE-2017-1000158 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264377 7.5 HIGH
Network
s9y serendipity Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure CWE-89
SQL Injection
CVE-2017-1000129 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264378 7.5 HIGH
Network
codiad codiad Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-1000125 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264379 9.8 CRITICAL
Network
redis-store redis-store Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis CWE-502
 Deserialization of Untrusted Data
CVE-2017-1000248 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
264380 7.5 HIGH
Network
codeigniter codeigniter British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws. CWE-20
 Improper Input Validation 
CVE-2017-1000247 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm