Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254191 5 警告 opensymphony
Apache Software Foundation		 - Apache Struts の XWork における重要情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2088 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
254192 4.3 警告 Apache Software Foundation - Apache Struts の javatemplates プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2087 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
254193 5 警告 inventivetec - MediaCAST における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2081 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
254194 7.5 危険 inventivetec - MediaCAST における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2080 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
254195 7.5 危険 inventivetec - MediaCAST における詳細不明な影響を受ける脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2079 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
254196 4.3 警告 inventivetec - MediaCAST の New Atlanta BlueDragon 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2078 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
254197 7.5 危険 inventivetec - MediaCAST の New Atlanta BlueDragon 管理インターフェースのデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2011-2077 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
254198 5 警告 inventivetec - MediaCAST における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2076 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
254199 8.5 危険 Skype Technologies S.A. - Skype のクライアントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2074 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
254200 4.3 警告 SquirrelMail Project - SquirrelMail の functions/mime.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2023 2012-03-27 18:43 2011-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246641 4.3 MEDIUM
Network 		google chrome Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page … NVD-CWE-noinfo
CVE-2018-20069 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246642 4.3 MEDIUM
Network 		google chrome Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page. CWE-20
 Improper Input Validation  		CVE-2018-20068 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246643 4.3 MEDIUM
Network 		google chrome A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about… NVD-CWE-noinfo
CVE-2018-20067 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246644 8.8 HIGH
Network 		google chrome Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-416
 Use After Free 		CVE-2018-20066 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246645 8.8 HIGH
Network 		google chrome Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file. CWE-20
 Improper Input Validation  		CVE-2018-20065 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246646 3.3 LOW
Local 		ibm spectrum_scale IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a file to return data from a different fil… CWE-200
Information Exposure 		CVE-2018-1993 2024-11-21 13:00 2019-01-9 Show GitHub Exploit DB Packet Storm
246647 4.9 MEDIUM
Network 		ibm api_connect IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive info… CWE-200
Information Exposure 		CVE-2018-1932 2024-11-21 13:00 2019-01-9 Show GitHub Exploit DB Packet Storm
246648 5.4 MEDIUM
Network 		ibm jazz_reporting_service IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t… CWE-79
Cross-site Scripting 		CVE-2018-1918 2024-11-21 13:00 2019-01-9 Show GitHub Exploit DB Packet Storm
246649 5.4 MEDIUM
Network 		ibm rational_publishing_engine IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functi… CWE-79
Cross-site Scripting 		CVE-2018-1951 2024-11-21 13:00 2019-01-5 Show GitHub Exploit DB Packet Storm
246650 7.8 HIGH
Local 		ibm i_access An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, rela… CWE-426
 Untrusted Search Path 		CVE-2018-1888 2024-11-21 13:00 2019-01-5 Show GitHub Exploit DB Packet Storm