Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255941 4.3 警告 Apache Software Foundation
Steinar H. Gunderson
- Steinar H. Gunderson mpm-itk Multi-Processing Module における権限を取得される脆弱性 CWE-16
環境設定
CVE-2011-1176 2011-05-19 11:04 2011-03-29 Show GitHub Exploit DB Packet Storm
255942 4.9 警告 IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
ヒューレット・パッカード
ターボリナックス
オラクル
レッドハット
- Apache HTTP Server における AllowOverride ディレクティブの処理に関する権限昇格の脆弱性 CWE-16
環境設定
CVE-2009-1195 2011-05-19 09:46 2009-05-28 Show GitHub Exploit DB Packet Storm
255943 4.3 警告 KDE project
レッドハット
- KDE SC の Konqueror 内にある KHTMLPart::htmlError 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1168 2011-05-18 18:30 2011-04-21 Show GitHub Exploit DB Packet Storm
255944 4.3 警告 KDE project
レッドハット
- kdelibs の kio/kio/tcpslavebase.cpp における任意の SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2011-1094 2011-05-18 18:26 2011-04-21 Show GitHub Exploit DB Packet Storm
255945 5.8 警告 KDE project
レッドハット
- KDE SC の KGet 内にある KGetMetalink::File::isValidNameAttr 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1586 2011-05-18 18:25 2011-04-21 Show GitHub Exploit DB Packet Storm
255946 9.3 危険 アドビシステムズ - 複数の Adobe 製品の CoolType ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0610 2011-05-18 18:24 2011-04-21 Show GitHub Exploit DB Packet Storm
255947 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll Core に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0861 2011-05-18 18:23 2011-04-19 Show GitHub Exploit DB Packet Storm
255948 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll - Spain に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0860 2011-05-18 18:21 2011-04-19 Show GitHub Exploit DB Packet Storm
255949 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
CWE-noinfo
CVE-2010-3777 2011-05-18 10:37 2010-12-9 Show GitHub Exploit DB Packet Storm
255950 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-119
CWE-noinfo
CVE-2010-3776 2011-05-18 10:35 2010-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264091 6.1 MEDIUM
Network
goldplugins easy_testimonials The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excer… CWE-79
Cross-site Scripting
CVE-2017-12131 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264092 6.1 MEDIUM
Network
event_list_project event_list The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action. CWE-79
Cross-site Scripting
CVE-2017-12068 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264093 7.5 HIGH
Network
potrace_project potrace Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c. CWE-125
Out-of-bounds Read
CVE-2017-12067 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264094 5.4 MEDIUM
Network
cacti cacti Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer hea… CWE-79
Cross-site Scripting
CVE-2017-12066 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264095 9.8 CRITICAL
Network
cacti cacti spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter. NVD-CWE-noinfo
CVE-2017-12065 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264096 7.5 HIGH
Network
open-emr openemr The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name. CWE-116
 Improper Encoding or Escaping of Output
CVE-2017-12064 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264097 6.1 MEDIUM
Network
connectwise manage services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafte… CWE-79
Cross-site Scripting
CVE-2017-11727 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264098 8.8 HIGH
Network
connectwise manage services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an e-mail address setting. CWE-352
 Origin Validation Error
CVE-2017-11726 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264099 8.8 HIGH
Network
techroutes tr_1803-3g_firmware Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filte… CWE-352
 Origin Validation Error
CVE-2017-11648 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm
264100 8.8 HIGH
Network
projeqtor projeqtor uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data, as demonstrated… CWE-94
Code Injection
CVE-2017-11760 2024-11-21 12:08 2017-08-1 Show GitHub Exploit DB Packet Storm