Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253621	10	危険	サイバートラスト株式会社オラクル	-	net-snmp の fixproc コマンドにおける不適切な一時ファイルを作成される脆弱性	-	CVE-2005-1740	2011-08-29 09:55	2005-05-18	Show	GitHub Exploit DB Packet Storm

253622	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-0053	2011-08-29 09:49	2011-03-1	Show	GitHub Exploit DB Packet Storm

253623	6.5	警告	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL におけるスタックベースのバッファオーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4015	2011-08-29 09:46	2011-01-31	Show	GitHub Exploit DB Packet Storm

253624	4.3	警告	WebsiteBaker Org	-	WebsiteBaker におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3385	2011-08-26 12:01	2011-08-26	Show	GitHub Exploit DB Packet Storm

253625	9.3	危険	マイクロソフト	-	Microsoft Windows 7 および 2008 の Data Access Tracing component における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1975	2011-08-26 10:22	2011-08-9	Show	GitHub Exploit DB Packet Storm

253626	5	警告	マイクロソフト	-	Microsoft Windows Server 2003 および 2008 の DNS サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-1970	2011-08-26 10:20	2011-08-9	Show	GitHub Exploit DB Packet Storm

253627	10	危険	マイクロソフト	-	Microsoft Windows Server 2008 の DNS サーバにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1966	2011-08-26 10:18	2011-08-9	Show	GitHub Exploit DB Packet Storm

253628	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer における Cookie を読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2011-2383	2011-08-26 10:17	2011-08-9	Show	GitHub Exploit DB Packet Storm

253629	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 7 から 9 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1963	2011-08-26 10:15	2011-08-9	Show	GitHub Exploit DB Packet Storm

253630	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 におけるコンテンツを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1962	2011-08-26 10:13	2011-08-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246811	4.8	MEDIUM Network	ultimatemember	user_profile_\&_membership	Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=um_opti…	CWE-79 Cross-site Scripting	CVE-2018-10234	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246812	8.8	HIGH Network	ultimatemember	user_profile_\&_membership	The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin.	CWE-352 Origin Validation Error	CVE-2018-10233	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246813	7.5	HIGH Network	beauty	beauty_ecosystem_coin	An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used in the Beauty Chain economic system, allows attacke…	CWE-190 Integer Overflow or Wraparound	CVE-2018-10299	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246814	5.4	MEDIUM Network	discuz	discuzx	Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.	CWE-79 Cross-site Scripting	CVE-2018-10298	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246815	5.4	MEDIUM Network	discuz	discuzx	Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images.	CWE-79 Cross-site Scripting	CVE-2018-10297	2024-11-21 12:41	2018-04-23	Show	GitHub Exploit DB Packet Storm

246816	6.1	MEDIUM Network	1234n	minicms	MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.	CWE-79 Cross-site Scripting	CVE-2018-10296	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246817	8.8	HIGH Network	chemcms_project	chemcms	ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.	CWE-352 Origin Validation Error	CVE-2018-10295	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246818	8.8	HIGH Network	ericssonlg	ipecs_nms	The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certa…	CWE-522 Insufficiently Protected Credentials	CVE-2018-10286	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246819	9.8	CRITICAL Network	ericssonlg	ipecs_nms	The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-10285	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

246820	5.5	MEDIUM Local	artifex debian	mupdf debian_linux	In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pd…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-10289	2024-11-21 12:41	2018-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed