Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253681 - - デル - Dell Kace K2000 Systems Deployment Appliance に脆弱性 - - 2011-04-28 15:21 2011-04-6 Show GitHub Exploit DB Packet Storm
253682 - - ネットギア - Netgear Prosafe Wireless-N Access Point に複数の脆弱性 - - 2011-04-28 15:19 2011-04-6 Show GitHub Exploit DB Packet Storm
253683 7.2 危険 Prefix WhoIs Project - pWhois Layer Four Traceroute に権限昇格の脆弱性 CWE-noinfo
情報不足
CVE-2011-0765 2011-04-28 15:18 2011-04-5 Show GitHub Exploit DB Packet Storm
253684 6.9 警告 レッドハット - policycoreutils パッケージの seunshare_mount 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1011 2011-04-28 15:11 2011-02-24 Show GitHub Exploit DB Packet Storm
253685 4.3 警告 マイクロソフト - Microsoft Windows にスクリプトインジェクションの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0096 2011-04-28 14:33 2011-01-31 Show GitHub Exploit DB Packet Storm
253686 9.3 危険 マイクロソフト - Microsoft WMI Administrative Tools の WBEMSingleView.ocx ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-3973 2011-04-28 14:29 2010-12-23 Show GitHub Exploit DB Packet Storm
253687 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0811 2011-04-28 14:25 2010-06-8 Show GitHub Exploit DB Packet Storm
253688 5 警告 ProFTPD Project - ProFTPD の mod_sftp モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-1137 2011-04-27 11:59 2011-01-24 Show GitHub Exploit DB Packet Storm
253689 6.8 警告 IBM - IBM AIX の LDAP ログイン機能における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-1561 2011-04-27 11:57 2011-03-31 Show GitHub Exploit DB Packet Storm
253690 4.4 警告 ヒューレット・パッカード - HP HP-UX の OS-Core.CORE2-KRN ファイルセットにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-0891 2011-04-27 11:56 2011-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274821 8.8 HIGH
Network
phpmybackuppro phpmybackuppro phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP code by storing a crafted string in a user configuration file. CWE-20
 Improper Input Validation 
CVE-2015-3639 2024-11-21 11:29 2017-07-21 Show GitHub Exploit DB Packet Storm
274822 8.8 HIGH
Network
phpmybackuppro phpmybackuppro phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injecting scripts via the path, filename, and period parameters to … CWE-94
Code Injection
CVE-2015-3638 2024-11-21 11:29 2017-07-21 Show GitHub Exploit DB Packet Storm
274823 6.1 MEDIUM
Network
eshop_project eshop The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform cross… CWE-79
Cross-site Scripting
CVE-2015-3421 2024-11-21 11:29 2017-07-21 Show GitHub Exploit DB Packet Storm
274824 7.5 HIGH
Network
etherpad etherpad Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the … CWE-22
Path Traversal
CVE-2015-3297 2024-11-21 11:29 2017-07-8 Show GitHub Exploit DB Packet Storm
274825 5.5 MEDIUM
Local
google android The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS messages without the associated "WRITE_SMS"… CWE-284
Improper Access Control
CVE-2015-3840 2024-11-21 11:29 2017-06-28 Show GitHub Exploit DB Packet Storm
274826 7.8 HIGH
Local
redhat automatic_bug_reporting_tool Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp… CWE-59
Link Following
CVE-2015-3315 2024-11-21 11:29 2017-06-27 Show GitHub Exploit DB Packet Storm
274827 6.5 MEDIUM
Network
apache thrift The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function. CWE-20
 Improper Input Validation 
CVE-2015-3254 2024-11-21 11:29 2017-06-17 Show GitHub Exploit DB Packet Storm
274828 7.5 HIGH
Network
slideshow_project slideshow The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for Wordpress allows remote attackers to read arbitrary Wordpress option values. CWE-200
Information Exposure
CVE-2015-3634 2024-11-21 11:29 2017-06-9 Show GitHub Exploit DB Packet Storm
274829 5.3 MEDIUM
Network
markdown-it_project markdown-it markdown-it before 4.1.0 does not block data: URLs. CWE-284
Improper Access Control
CVE-2015-3295 2024-11-21 11:29 2017-06-8 Show GitHub Exploit DB Packet Storm
274830 6.5 MEDIUM
Network
google android The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate… CWE-20
 Improper Input Validation 
CVE-2015-3830 2024-11-21 11:29 2017-06-7 Show GitHub Exploit DB Packet Storm