Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252871 6.3 警告 Conky - Conky における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2011-3616 2011-11-10 16:26 2011-11-4 Show GitHub Exploit DB Packet Storm
252872 6.9 警告 GNOME Project
レッドハット
- GNOME NetworkManager における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2011-3364 2011-11-10 16:24 2011-11-4 Show GitHub Exploit DB Packet Storm
252873 3.6 注意 pureftpd - pure-FTPd のディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-3171 2011-11-10 16:24 2011-11-4 Show GitHub Exploit DB Packet Storm
252874 6.8 警告 ヒューレット・パッカード - HP-UX Containers における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-3164 2011-11-10 16:23 2011-10-26 Show GitHub Exploit DB Packet Storm
252875 7.5 危険 e107.org - e107 CMS の install_.php における任意の PHP コードを挿入される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2011-1513 2011-11-10 16:23 2011-11-4 Show GitHub Exploit DB Packet Storm
252876 7.5 危険 Deon George - phpLDAPadmin の lib/functions.php 内の masort 関数における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-4075 2011-11-9 16:42 2011-11-2 Show GitHub Exploit DB Packet Storm
252877 4.3 警告 Deon George - phpLDAPadmin の cmd.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4074 2011-11-9 16:42 2011-11-2 Show GitHub Exploit DB Packet Storm
252878 6.4 警告 ヒューレット・パッカード - HP OpenView Network Node Manager (OV NNM) における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-3167 2011-11-9 16:38 2011-11-1 Show GitHub Exploit DB Packet Storm
252879 6.4 警告 ヒューレット・パッカード - HP OpenView Network Node Manager (OV NNM) における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-3166 2011-11-9 16:38 2011-11-1 Show GitHub Exploit DB Packet Storm
252880 6.4 警告 ヒューレット・パッカード - HP OpenView Network Node Manager (OV NNM) における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-3165 2011-11-9 16:37 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
302251 6.1 MEDIUM
Network
bbpress bbpress bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter. CWE-79
Cross-site Scripting
CVE-2011-1150 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
302252 6.1 MEDIUM
Network
phpshop phpshop PHPShop through 0.8.1 has XSS. CWE-79
Cross-site Scripting
CVE-2011-1069 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
302253 6.1 MEDIUM
Network
vanillaforums vanilla Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. CWE-79
Cross-site Scripting
CVE-2011-1009 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
302254 9.8 CRITICAL
Network
smarty
debian
smarty
debian_linux
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. CWE-20
 Improper Input Validation 
CVE-2011-1028 2024-11-21 10:25 2019-11-21 Show GitHub Exploit DB Packet Storm
302255 7.8 HIGH
Local
unixodbc
debian
opensuse
redhat
unixodbc
debian_linux
opensuse
enterprise_linux
The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string. CWE-120
Classic Buffer Overflow
CVE-2011-1145 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
302256 4.7 MEDIUM
Local
tesseract_project
debian
tesseract
debian_linux
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file. CWE-59
Link Following
CVE-2011-1136 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
302257 7.8 HIGH
Local
v86d_project
debian
v86d
debian_linux
v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences. CWE-863
 Incorrect Authorization
CVE-2011-1070 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
302258 6.1 MEDIUM
Network
s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/Imag… CWE-79
Cross-site Scripting
CVE-2011-1135 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm
302259 9.8 CRITICAL
Network
s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2011-1134 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm
302260 6.1 MEDIUM
Network
s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php. CWE-79
Cross-site Scripting
CVE-2011-1133 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm