Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253701 5 警告 Google - Google Chrome の PDF パーサーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3906 2011-12-16 15:54 2011-12-13 Show GitHub Exploit DB Packet Storm
253702 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3904 2011-12-16 15:53 2011-12-13 Show GitHub Exploit DB Packet Storm
253703 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3903 2011-12-16 15:42 2011-12-13 Show GitHub Exploit DB Packet Storm
253704 5 警告 WHMCS Limited - WHMCS の clientarea.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4813 2011-12-16 15:31 2011-12-14 Show GitHub Exploit DB Packet Storm
253705 4.3 警告 BST - BestShopPro の nowosci.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4812 2011-12-16 15:28 2011-12-14 Show GitHub Exploit DB Packet Storm
253706 7.5 危険 BST - BestShopPro の pokaz_podkat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4811 2011-12-16 15:28 2011-12-14 Show GitHub Exploit DB Packet Storm
253707 5 警告 WHMCS Limited - WHMCS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4810 2011-12-16 15:27 2011-12-14 Show GitHub Exploit DB Packet Storm
253708 5 警告 phpAlbum - phpAlbum の main.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4807 2011-12-16 15:23 2011-12-14 Show GitHub Exploit DB Packet Storm
253709 4.3 警告 phpAlbum - phpAlbum の main.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4806 2011-12-16 15:20 2011-12-14 Show GitHub Exploit DB Packet Storm
253710 4.3 警告 SAP - SAP Crystal Report Server の pubDBLogon.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4805 2011-12-16 15:18 2011-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246301 8.8 HIGH
Network 		libconfuse_project
debian 		libconfuse
debian_linux 		trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read. CWE-125
Out-of-bounds Read 		CVE-2018-14447 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246302 8.8 HIGH
Network 		techsmith mp4v2 MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other i… CWE-787
 Out-of-bounds Write 		CVE-2018-14446 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246303 6.5 MEDIUM
Network 		axiosys bento4 In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2018-14445 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246304 7.5 HIGH
Network 		libdxfrw_project libdxfrw libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash. CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2018-14444 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246305 6.5 MEDIUM
Network 		gnu libredwg get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV). CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-14443 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246306 9.8 CRITICAL
Network 		foxitsoftware phantompdf
foxit_reader 		Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs. CWE-416
 Use After Free 		CVE-2018-14442 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246307 6.1 MEDIUM
Network 		sanscms sanscms blog/index.php in SansCMS 0.7 has XSS via the q parameter. CWE-79
Cross-site Scripting 		CVE-2018-14422 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246308 8.8 HIGH
Network 		seacms seacms SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin_video.php (aka /backend/admin_video.php). The code is executed by visiting /de… CWE-352
CWE-94
 Origin Validation Error
Code Injection 		CVE-2018-14421 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246309 8.8 HIGH
Network 		metinfo metinfo MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=admin_admin&a=doaddsave URI. CWE-352
 Origin Validation Error 		CVE-2018-14420 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm
246310 4.8 MEDIUM
Network 		metinfo metinfo MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page. CWE-79
Cross-site Scripting 		CVE-2018-14419 2024-11-21 12:49 2018-07-20 Show GitHub Exploit DB Packet Storm