Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 20, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252911 | 4.3 | 警告 | Zikula Foundation | - | Zikula Application Framework の Theme モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3979 | 2011-10-11 10:18 | 2011-09-9 | Show | GitHub Exploit DB Packet Storm |
| 252912 | 3.5 | 注意 | LightNEasy | - | LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3978 | 2011-10-11 10:15 | 2011-10-4 | Show | GitHub Exploit DB Packet Storm |
| 252913 | 7.2 | 危険 | NoMachine | - | NoMachine NX Node および NX Server の nxconfigure.sh における任意のファイルを読まれる脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-3977 | 2011-10-11 10:13 | 2011-08-5 | Show | GitHub Exploit DB Packet Storm |
| 252914 | 5 | 警告 | IceWarp, Inc. | - | IceWarp Mail Server の IceWarp WebMail における設定情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3580 | 2011-10-11 10:11 | 2011-09-30 | Show | GitHub Exploit DB Packet Storm |
| 252915 | 6.4 | 警告 | IceWarp, Inc. | - | IceWarp Mail Server の server/webmail.php における任意のファイルを読まれる脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-3579 | 2011-10-11 10:10 | 2011-09-30 | Show | GitHub Exploit DB Packet Storm |
| 252916 | 7.5 | 危険 | シマンテック | - | Symantec IM Manager の管理コンソールにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-0554 | 2011-10-11 10:10 | 2011-09-29 | Show | GitHub Exploit DB Packet Storm |
| 252917 | 7.5 | 危険 | シマンテック | - | Symantec IM Manager の管理コンソールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-0553 | 2011-10-11 10:09 | 2011-09-29 | Show | GitHub Exploit DB Packet Storm |
| 252918 | 4.3 | 警告 | シマンテック | - | Symantec IM Manager の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-0552 | 2011-10-11 10:09 | 2011-09-29 | Show | GitHub Exploit DB Packet Storm |
| 252919 | 4 | 警告 | 株式会社アークウェブ | - | A-Form におけるアクセス制限不備の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-2676 | 2011-10-7 12:04 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 252920 | 5 | 警告 | utage.org | - | 宴会くんにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-2675 | 2011-10-7 12:03 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 20, 2026, 4:14 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254071 | 9.8 |
CRITICAL
Network |
php_multivendor_ecommerce_project | php_multivendor_ecommerce | PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. |
CWE-89
SQL Injection |
CVE-2017-17957 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254072 | 6.1 |
MEDIUM
Network |
php_multivendor_ecommerce_project | php_multivendor_ecommerce | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter. |
CWE-79
Cross-site Scripting |
CVE-2017-17956 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254073 | 6.1 |
MEDIUM
Network |
php_multivendor_ecommerce_project | php_multivendor_ecommerce | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. |
CWE-79
Cross-site Scripting |
CVE-2017-17955 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254074 | 6.1 |
MEDIUM
Network |
php_multivendor_ecommerce_project | php_multivendor_ecommerce | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. |
CWE-79
Cross-site Scripting |
CVE-2017-17954 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254075 | 6.1 |
MEDIUM
Network |
php_multivendor_ecommerce_project | php_multivendor_ecommerce | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter. |
CWE-79
Cross-site Scripting |
CVE-2017-17953 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254076 | 8.6 |
HIGH
Network |
php_multivendor_ecommerce_project | php_multivendor_ecommerce | PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address. |
CWE-20
Improper Input Validation |
CVE-2017-17952 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254077 | 9.8 |
CRITICAL
Network |
php_multivendor_ecommerce_project | php_multivendor_ecommerce | PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter. |
CWE-89
SQL Injection |
CVE-2017-17951 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254078 | 8.8 |
HIGH
Network |
cells | blog | Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. |
CWE-89
SQL Injection |
CVE-2017-17950 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254079 | 6.1 |
MEDIUM
Network |
cells | blog | Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. |
CWE-79
Cross-site Scripting |
CVE-2017-17949 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |
| 254080 | 6.1 |
MEDIUM
Network |
cells | blog | Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request. |
CWE-79
Cross-site Scripting |
CVE-2017-17948 | 2024-11-21 12:19 | 2017-12-29 | Show | GitHub Exploit DB Packet Storm |