Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255951	7.1	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2011-1604	2011-12-1 10:35	2011-04-27	Show	GitHub Exploit DB Packet Storm

255952	4.3	警告	John Godley	-	WordPress 用 Redirection プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4562	2011-11-30 16:50	2011-11-28	Show	GitHub Exploit DB Packet Storm

255953	4.3	警告	codefuture	-	CF Image Hosting Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4572	2011-11-30 16:38	2011-11-29	Show	GitHub Exploit DB Packet Storm

255954	7.5	危険	EA Improved	-	Estate Agent コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4571	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

255955	7.5	危険	Takeaweb	-	Time Returns コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4570	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

255956	7.5	危険	tommykent1210	-	MyBB Forum 用 Userbar プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4569	2011-11-30 16:36	2011-11-29	Show	GitHub Exploit DB Packet Storm

255957	4.3	警告	WordPress.org	-	WordPress 用 Flowplayer プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4568	2011-11-30 16:35	2011-11-29	Show	GitHub Exploit DB Packet Storm

255958	4.3	警告	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4567	2011-11-30 16:34	2011-11-29	Show	GitHub Exploit DB Packet Storm

255959	4.3	警告	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4547	2011-11-30 16:34	2011-11-29	Show	GitHub Exploit DB Packet Storm

255960	4.3	警告	Hastymail	-	Hastymail2 の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4541	2011-11-30 16:32	2011-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277751	9.8	CRITICAL Network	nettle_project canonical opensuse	nettle ubuntu_linux leap opensuse	x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to…	CWE-310 CWE-254 Cryptographic Issues 7PK - Security Features	CVE-2015-8804	2024-11-21 11:39	2016-02-24	Show	GitHub Exploit DB Packet Storm

277752	9.8	CRITICAL Network	nettle_project canonical opensuse	nettle ubuntu_linux leap opensuse	The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allo…	CWE-310 CWE-254 Cryptographic Issues 7PK - Security Features	CVE-2015-8803	2024-11-21 11:39	2016-02-24	Show	GitHub Exploit DB Packet Storm

277753	6.1	MEDIUM Network	apache	solr	Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HT…	CWE-79 Cross-site Scripting	CVE-2015-8797	2024-11-21 11:39	2016-02-15	Show	GitHub Exploit DB Packet Storm

277754	6.1	MEDIUM Network	apache	solr	Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a craf…	CWE-79 Cross-site Scripting	CVE-2015-8796	2024-11-21 11:39	2016-02-15	Show	GitHub Exploit DB Packet Storm

277755	6.1	MEDIUM Network	apache	solr	Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled duri…	CWE-79 Cross-site Scripting	CVE-2015-8795	2024-11-21 11:39	2016-02-15	Show	GitHub Exploit DB Packet Storm

277756	9.8	CRITICAL Network	linux	linux_kernel	The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or…	CWE-476 NULL Pointer Dereference	CVE-2015-8787	2024-11-21 11:39	2016-02-8	Show	GitHub Exploit DB Packet Storm

277757	6.2	MEDIUM Local	linux suse	linux_kernel linux_enterprise_real_time_extension	The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero lengt…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2015-8785	2024-11-21 11:39	2016-02-8	Show	GitHub Exploit DB Packet Storm

277758	6.2	MEDIUM Local	linux debian canonical	linux_kernel debian_linux ubuntu_linux	net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a c…	CWE-362 Race Condition	CVE-2015-8767	2024-11-21 11:39	2016-02-8	Show	GitHub Exploit DB Packet Storm

277759	7.0	HIGH Local	linux	linux_kernel	kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter th…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8709	2024-11-21 11:39	2016-02-8	Show	GitHub Exploit DB Packet Storm

277760	5.3	MEDIUM Network	radicale	radicale	Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8748	2024-11-21 11:39	2016-02-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed