Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254741 4.3 警告 JJWDesign - PHP Booking Calendar の details_view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5045 2012-01-5 16:14 2011-12-30 Show GitHub Exploit DB Packet Storm
254742 7.2 危険 SopCast - SopCast における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5044 2012-01-5 16:13 2011-12-30 Show GitHub Exploit DB Packet Storm
254743 4.3 警告 Tomatosoft - TomatoSoft Free Mp3 Player におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5043 2012-01-5 16:12 2011-12-30 Show GitHub Exploit DB Packet Storm
254744 4.3 警告 gphemsley - SASHA の inc/lib/lib.base.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5042 2012-01-5 16:11 2011-12-30 Show GitHub Exploit DB Packet Storm
254745 4.3 警告 PulseCMS - Pulse Pro CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5041 2012-01-5 16:10 2011-12-30 Show GitHub Exploit DB Packet Storm
254746 4.3 警告 Infoproject - Infoproject Biznis Heroj におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5040 2012-01-5 14:27 2011-12-30 Show GitHub Exploit DB Packet Storm
254747 7.5 危険 Infoproject - Infoproject Biznis Heroj における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5039 2012-01-5 14:26 2011-12-30 Show GitHub Exploit DB Packet Storm
254748 7.5 危険 hitCode - hitCode hitAppoint における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5038 2012-01-5 14:24 2011-12-30 Show GitHub Exploit DB Packet Storm
254749 4.4 警告 ConfigServer - ConfigServer Security & Firewall におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5033 2012-01-5 14:21 2011-12-10 Show GitHub Exploit DB Packet Storm
254750 4.9 警告 WinMount - WinMount の WMDrive.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-5032 2012-01-5 14:20 2011-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246271 2.4 LOW
Physics 		neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d5_connected_firmware
botvac_d7_connected_firmware
botvac_d3_connected_firmware
botvac_85_firmware 		An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick… CWE-326
Inadequate Encryption Strength 		CVE-2018-17177 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246272 7.5 HIGH
Network 		neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d7_connected_firmware 		A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be repl… CWE-294
Authentication Bypass by Capture-replay  		CVE-2018-17176 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246273 5.3 MEDIUM
Network 		marshmallow_project marshmallow In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to exp… NVD-CWE-noinfo
CVE-2018-17175 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246274 8.8 HIGH
Network 		abus tvip_10000_firmware
tvip_10001_firmware
tvip_10005_firmware
tvip_10005a_firmware
tvip_10005b_firmware
tvip_10050_firmware
tvip_10051_firmware
tvip_10055a_firmware
tvip_10055b_… 		An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges. CWE-22
Path Traversal 		CVE-2018-16739 2024-11-21 12:53 2023-10-27 Show GitHub Exploit DB Packet Storm
246275 8.8 HIGH
Network 		open-emr openemr OpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as demonstrated by use of interface/super/manage_site_files.php to upload a .php file. CWE-352
 Origin Validation Error 		CVE-2018-16795 2024-11-21 12:53 2020-12-31 Show GitHub Exploit DB Packet Storm
246276 7.8 HIGH
Local 		v-secure jingyun_antivirus In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values… CWE-20
 Improper Input Validation  		CVE-2018-16723 2024-11-21 12:53 2020-11-24 Show GitHub Exploit DB Packet Storm
246277 7.8 HIGH
Local 		v-secure jingyun_antivirus In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values… CWE-20
 Improper Input Validation  		CVE-2018-16722 2024-11-21 12:53 2020-11-24 Show GitHub Exploit DB Packet Storm
246278 7.8 HIGH
Local 		v-secure jingyun_antivirus In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values… CWE-20
 Improper Input Validation  		CVE-2018-16721 2024-11-21 12:53 2020-11-24 Show GitHub Exploit DB Packet Storm
246279 7.8 HIGH
Local 		v-secure jingyun_antivirus In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values… CWE-20
 Improper Input Validation  		CVE-2018-16720 2024-11-21 12:53 2020-11-24 Show GitHub Exploit DB Packet Storm
246280 7.8 HIGH
Local 		v-secure jingyun_antivirus In Jingyun Antivirus v2.4.2.39, the driver file (hookbody.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values … CWE-20
 Improper Input Validation  		CVE-2018-16719 2024-11-21 12:53 2020-11-24 Show GitHub Exploit DB Packet Storm