Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255421 7.5 危険 Google - Google Chrome にて使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2348 2011-07-15 10:10 2011-06-28 Show GitHub Exploit DB Packet Storm
255422 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2349 2011-07-15 10:09 2011-06-28 Show GitHub Exploit DB Packet Storm
255423 7.5 危険 Google - Google Chrome の HTML パーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2350 2011-07-15 10:08 2011-06-28 Show GitHub Exploit DB Packet Storm
255424 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2351 2011-07-15 10:07 2011-06-28 Show GitHub Exploit DB Packet Storm
255425 - - Cactusoft International FZ-LLC & Cactusoft Ltd. - Parodia にブラインド SQL インジェクションの脆弱性 - - 2011-07-14 09:51 2011-06-28 Show GitHub Exploit DB Packet Storm
255426 - - Zoho Corporation - ManageEngine ServiceDesk Plus にディレクトリトラバーサルの脆弱性 - - 2011-07-14 09:50 2011-06-28 Show GitHub Exploit DB Packet Storm
255427 6.1 警告 Linux
レッドハット		 - Linux kernel のソケットの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4805 2011-07-14 09:40 2010-08-1 Show GitHub Exploit DB Packet Storm
255428 5 警告 Mozilla Foundation - Mozilla の Firefox および SeaMonkey における XPInstall の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2370 2011-07-13 10:09 2011-06-21 Show GitHub Exploit DB Packet Storm
255429 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2369 2011-07-13 10:08 2011-06-21 Show GitHub Exploit DB Packet Storm
255430 4.3 警告 Mozilla Foundation - Mozilla Firefox などで使用される Mozilla Gecko における任意のイメージの近似コピーを取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2366 2011-07-13 10:06 2011-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249401 9.8 CRITICAL
Network 		jerryscript jerryscript An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function via a RegExp("[\\u0") payload, related to re_parse_char_class in parser/… CWE-125
Out-of-bounds Read 		CVE-2018-11419 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249402 9.8 CRITICAL
Network 		jerryscript jerryscript An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_utf8 function via a RegExp("[\\u0020") payload, related to re_parse_char_class in par… CWE-125
Out-of-bounds Read 		CVE-2018-11418 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249403 8.8 HIGH
Network 		jpegoptim_project jpegoptim jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified… CWE-415
 Double Free 		CVE-2018-11416 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249404 6.1 MEDIUM
Network 		sap internet_transaction_server SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases o… CWE-79
Cross-site Scripting 		CVE-2018-11415 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249405 8.8 HIGH
Network 		bearadmin_project bearadmin An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly. CWE-89
SQL Injection 		CVE-2018-11414 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249406 6.5 MEDIUM
Network 		bearadmin_project bearadmin An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/d… CWE-22
Path Traversal 		CVE-2018-11413 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249407 5.9 MEDIUM
Network 		linux
canonical 		linux_kernel
ubuntu_linux 		In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that sto… CWE-416
 Use After Free 		CVE-2018-11412 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249408 4.8 MEDIUM
Network 		clippercms clippercms Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2018-11332 2024-11-21 12:43 2018-05-25 Show GitHub Exploit DB Packet Storm
249409 7.5 HIGH
Network 		dimoncoin dimoncoin The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) b… CWE-20
 Improper Input Validation  		CVE-2018-11411 2024-11-21 12:43 2018-05-24 Show GitHub Exploit DB Packet Storm
249410 9.8 CRITICAL
Network 		liblouis
canonical 		liblouis
ubuntu_linux 		An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly… CWE-416
 Use After Free 		CVE-2018-11410 2024-11-21 12:43 2018-05-24 Show GitHub Exploit DB Packet Storm