Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253721 5 警告 Nucleus - Nucleus における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3760 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253722 5 警告 MyBB Group - MyBB における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3759 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253723 5 警告 moundlabs - ::mound:: における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3758 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253724 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3757 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253725 5 警告 microblog - MicroBlog における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3756 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253726 5 警告 MantisBT Group - MantisBT における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3755 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253727 5 警告 Mambo Foundation - Mambo における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3754 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253728 5 警告 LinPHA - LinPHA における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3753 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253729 5 警告 LimeSurvey - LimeSurvey における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3752 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
253730 5 警告 LifeType - LifeType における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3751 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246101 6.5 MEDIUM
Network 		opensuse
canonical 		libsolv
ubuntu_linux 		There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects t… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-20534 2024-11-21 13:01 2018-12-29 Show GitHub Exploit DB Packet Storm
246102 6.5 MEDIUM
Network 		opensuse
canonical 		libsolv
ubuntu_linux 		There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. CWE-476
 NULL Pointer Dereference 		CVE-2018-20533 2024-11-21 13:01 2018-12-29 Show GitHub Exploit DB Packet Storm
246103 6.5 MEDIUM
Network 		opensuse
canonical 		libsolv
ubuntu_linux 		There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. CWE-476
 NULL Pointer Dereference 		CVE-2018-20532 2024-11-21 13:01 2018-12-29 Show GitHub Exploit DB Packet Storm
246104 5.4 MEDIUM
Network 		website_seller_script_project website_seller_script PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896. CWE-79
Cross-site Scripting 		CVE-2018-20530 2024-11-21 13:01 2018-12-29 Show GitHub Exploit DB Packet Storm
246105 6.5 MEDIUM
Network 		jeecms jeecms JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-20528 2024-11-21 13:01 2018-12-29 Show GitHub Exploit DB Packet Storm
246106 6.1 MEDIUM
Network 		urlchatbox chat_anywhere The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is outside the scope of a Content Security Po… CWE-79
Cross-site Scripting 		CVE-2018-20524 2024-11-21 13:01 2018-12-28 Show GitHub Exploit DB Packet Storm
246107 6.1 MEDIUM
Network 		1234n minicms MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233. CWE-79
Cross-site Scripting 		CVE-2018-20520 2024-11-21 13:01 2018-12-28 Show GitHub Exploit DB Packet Storm
246108 8.1 HIGH
Network 		74cms 74cms An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=a… CWE-20
 Improper Input Validation  		CVE-2018-20519 2024-11-21 13:01 2018-12-28 Show GitHub Exploit DB Packet Storm
246109 5.5 MEDIUM
Local 		linux
debian 		linux_kernel
debian_linux 		An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging C… CWE-200
Information Exposure 		CVE-2018-20511 2024-11-21 13:01 2018-12-27 Show GitHub Exploit DB Packet Storm
246110 9.8 CRITICAL
Network 		crashfix_project crashfix CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function. CWE-89
SQL Injection 		CVE-2018-20508 2024-11-21 13:01 2018-12-27 Show GitHub Exploit DB Packet Storm