Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253531 4.3 警告 マイクロソフト - Microsoft Windows の MHTML プロトコルハンドラにおけるクロスサイトスクリプティングを誘導される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1894 2011-06-23 11:27 2011-06-14 Show GitHub Exploit DB Packet Storm
253532 5.5 警告 ターボリナックス
Timo Sirainen
レッドハット		 - Dovecot の plugins/acl/acl-backend-vfile.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3707 2011-06-23 11:15 2010-10-2 Show GitHub Exploit DB Packet Storm
253533 4 警告 ターボリナックス
Timo Sirainen
レッドハット		 - Dovecot におけるサービス運用妨害 (master process outage) の脆弱性 CWE-Other
その他 		CVE-2010-3780 2011-06-23 11:14 2010-10-2 Show GitHub Exploit DB Packet Storm
253534 4.3 警告 Google - Android の Android ブラウザにおける SD カード上の情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4804 2011-06-21 07:53 2011-06-9 Show GitHub Exploit DB Packet Storm
253535 4.3 警告 株式会社カワイビジネスソフトウエア - WeblyGo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1330 2011-06-20 12:01 2011-06-20 Show GitHub Exploit DB Packet Storm
253536 - - Autonomy - Autonomy KeyView IDOL に複数の脆弱性 - - 2011-06-20 11:19 2011-06-8 Show GitHub Exploit DB Packet Storm
253537 7.6 危険 シスコシステムズ - Linux および Mac OS 上で稼働する Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2040 2011-06-20 11:12 2011-06-1 Show GitHub Exploit DB Packet Storm
253538 7.6 危険 シスコシステムズ - Windows 上で稼働する Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2039 2011-06-20 11:10 2011-06-1 Show GitHub Exploit DB Packet Storm
253539 9.3 危険 シスコシステムズ - Cisco WebEx WRF Player の atrpui.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2880 2011-06-17 11:28 2009-12-16 Show GitHub Exploit DB Packet Storm
253540 9.3 危険 シスコシステムズ - Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2879 2011-06-17 11:25 2009-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259031 9.8 CRITICAL
Network 		glpi-project glpi GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers. CWE-89
SQL Injection 		CVE-2017-11329 2024-11-21 12:07 2017-07-17 Show GitHub Exploit DB Packet Storm
259032 5.5 MEDIUM
Local 		virustotal yara Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-11328 2024-11-21 12:07 2017-07-17 Show GitHub Exploit DB Packet Storm
259033 8.1 HIGH
Network 		cobiansoft cobian_backup Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abu… CWE-78
OS Command  		CVE-2017-11318 2024-11-21 12:07 2017-07-17 Show GitHub Exploit DB Packet Storm
259034 7.8 HIGH
Local 		openmpt libopenmpt
openmpt 		soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that trigge… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-11311 2024-11-21 12:07 2017-07-17 Show GitHub Exploit DB Packet Storm
259035 8.8 HIGH
Network 		imagemagick imagemagick The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-11310 2024-11-21 12:07 2017-07-14 Show GitHub Exploit DB Packet Storm
259036 8.8 HIGH
Network 		rack-cors_project
debian 		rack-cors
debian_linux 		Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com dom… NVD-CWE-noinfo
CVE-2017-11173 2024-11-21 12:07 2017-07-13 Show GitHub Exploit DB Packet Storm
259037 6.1 MEDIUM
Network 		finecms_project finecms FineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either during logging or during the reading of logs, a different vulnerability than CVE-2017… CWE-79
Cross-site Scripting 		CVE-2017-11202 2024-11-21 12:07 2017-07-13 Show GitHub Exploit DB Packet Storm
259038 5.4 MEDIUM
Network 		finecms_project finecms application/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action. CWE-79
Cross-site Scripting 		CVE-2017-11201 2024-11-21 12:07 2017-07-13 Show GitHub Exploit DB Packet Storm
259039 8.8 HIGH
Network 		finecms_project finecms SQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitor_ip parameter. CWE-89
SQL Injection 		CVE-2017-11200 2024-11-21 12:07 2017-07-13 Show GitHub Exploit DB Packet Storm
259040 6.1 MEDIUM
Network 		finecms_project finecms Cross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows remote attackers to inject arbitrary web script or HTML via the folder, id, or nam… CWE-79
Cross-site Scripting 		CVE-2017-11198 2024-11-21 12:07 2017-07-13 Show GitHub Exploit DB Packet Storm