Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253531	8.5	危険	シスコシステムズ	-	Cisco Unified Communications Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1609	2011-12-1 10:40	2011-04-27	Show	GitHub Exploit DB Packet Storm

253532	6.5	警告	シスコシステムズ	-	Cisco Unified Communications Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1607	2011-12-1 10:40	2011-04-27	Show	GitHub Exploit DB Packet Storm

253533	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1606	2011-12-1 10:38	2011-04-27	Show	GitHub Exploit DB Packet Storm

253534	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1605	2011-12-1 10:36	2011-04-27	Show	GitHub Exploit DB Packet Storm

253535	7.1	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2011-1604	2011-12-1 10:35	2011-04-27	Show	GitHub Exploit DB Packet Storm

253536	4.3	警告	John Godley	-	WordPress 用 Redirection プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4562	2011-11-30 16:50	2011-11-28	Show	GitHub Exploit DB Packet Storm

253537	4.3	警告	codefuture	-	CF Image Hosting Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4572	2011-11-30 16:38	2011-11-29	Show	GitHub Exploit DB Packet Storm

253538	7.5	危険	EA Improved	-	Estate Agent コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4571	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

253539	7.5	危険	Takeaweb	-	Time Returns コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4570	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

253540	7.5	危険	tommykent1210	-	MyBB Forum 用 Userbar プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4569	2011-11-30 16:36	2011-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246241	9.8	CRITICAL Network	golemcms_project	golemcms	GolemCMS through 2008-12-24, if the install/ directory remains active after an installation, allows remote attackers to execute arbitrary PHP code by inserting this code into the "Database Informatio…	CWE-94 Code Injection	CVE-2018-14579	2024-11-21 12:49	2018-07-24	Show	GitHub Exploit DB Packet Storm

246242	5.5	MEDIUM Local	trms	tightrope_media_carousel_digital_signage	A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary fil…	CWE-22 Path Traversal	CVE-2018-14573	2024-11-21 12:49	2018-07-24	Show	GitHub Exploit DB Packet Storm

246243	8.8	HIGH Network	niushop	b2b2c_multi-business	A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a .php file to the web server via a profil…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-14570	2024-11-21 12:49	2018-07-24	Show	GitHub Exploit DB Packet Storm

246244	7.5	HIGH Network	suricata-ids	suricata	Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortl…	NVD-CWE-noinfo	CVE-2018-14568	2024-11-21 12:49	2018-07-24	Show	GitHub Exploit DB Packet Storm

246245	9.8	CRITICAL Network	thunlp	thulac	An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.	CWE-125 Out-of-bounds Read	CVE-2018-14565	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246246	9.8	CRITICAL Network	thunlp	thulac	An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-14564	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246247	9.8	CRITICAL Network	thunlp	thulac	An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in include/cb_tagging_learner.h, possibly leading to …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-14563	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246248	9.8	CRITICAL Network	thunlp	thulac	An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cb_model.h.	CWE-476 NULL Pointer Dereference	CVE-2018-14562	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246249	9.8	CRITICAL Network	imagemagick canonical	imagemagick ubuntu_linux	The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption.	CWE-787 CWE-908 Out-of-bounds Write Use of Uninitialized Resource	CVE-2018-14551	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246250	6.5	MEDIUM Network	libwav_project	libwav	An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c.	NVD-CWE-noinfo	CVE-2018-14549	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed