Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257751 4.3 警告 Simple Machines - Simple Machines Forum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4173 2011-10-31 14:07 2011-09-18 Show GitHub Exploit DB Packet Storm
257752 4.3 警告 KENT-WEB - KENT-WEB WEB FORUM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4172 2011-10-31 14:05 2011-10-24 Show GitHub Exploit DB Packet Storm
257753 4.3 警告 IBM - IBM WebSphere ILOG Rule Team Server の content/error.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4171 2011-10-31 14:00 2011-10-5 Show GitHub Exploit DB Packet Storm
257754 7.5 危険 Simple Machines - Simple Machines Forum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3615 2011-10-31 13:59 2011-09-18 Show GitHub Exploit DB Packet Storm
257755 9.3 危険 Novell - Novell ZENworks Handheld Management (ZHM) の ZfHSrvr.exe における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2656 2011-10-31 13:59 2011-10-5 Show GitHub Exploit DB Packet Storm
257756 9.3 危険 Novell - Novell ZENworks Handheld Management (ZHM) の ZfHSrvr.exe における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2655 2011-10-31 13:57 2011-10-5 Show GitHub Exploit DB Packet Storm
257757 6.8 警告 Digium - Asterisk Open Source の chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4063 2011-10-31 10:31 2011-10-4 Show GitHub Exploit DB Packet Storm
257758 7.5 危険 Atcom S.A. - ATCOM Netvolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3340 2011-10-31 10:29 2011-10-21 Show GitHub Exploit DB Packet Storm
257759 6.5 警告 BlackBerry - BlackBerry Collaboration Service における任意のユーザアカウントへログインされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0290 2011-10-31 10:29 2011-10-11 Show GitHub Exploit DB Packet Storm
257760 7.5 危険 Atcom S.A. - ATCOM Netvolution の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4967 2011-10-31 10:28 2011-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246121 9.8 CRITICAL
Network 		sahipro sahi_pro An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploited to inject SQL queries and run standard… CWE-89
SQL Injection 		CVE-2018-20469 2024-11-21 13:01 2019-06-17 Show GitHub Exploit DB Packet Storm
246122 8.8 HIGH
Network 		sahipro sahi_pro An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2018-20468 2024-11-21 13:01 2019-06-17 Show GitHub Exploit DB Packet Storm
246123 9.8 CRITICAL
Network 		whatsapp whatsapp When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 an… CWE-787
 Out-of-bounds Write 		CVE-2018-20655 2024-11-21 13:01 2019-06-15 Show GitHub Exploit DB Packet Storm
246124 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows… CWE-416
 Use After Free 		CVE-2018-20356 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246125 9.8 CRITICAL
Network 		cesanta mongoose An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allow… CWE-416
 Use After Free 		CVE-2018-20355 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246126 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlie… CWE-416
 Use After Free 		CVE-2018-20354 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246127 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and ear… CWE-416
 Use After Free 		CVE-2018-20353 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246128 8.8 HIGH
Network 		cesanta mongoose_embedded_web_server_library Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote … CWE-416
 Use After Free 		CVE-2018-20352 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246129 5.3 MEDIUM
Network 		mi stock_browser
redmi_7_firmware
redmi_note_7_firmware
redmi_note_6_pro_firmware
redmi_6_firmware
redmi_6a_firmware
redmi_s2_firmware
redmi_note_5_pro_firmware
redmi_k20_pro_fir… 		Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleart… CWE-77
Command Injection 		CVE-2018-20523 2024-11-21 13:01 2019-06-8 Show GitHub Exploit DB Packet Storm
246130 7.5 HIGH
Network 		gitlab gitlab An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-20500 2024-11-21 13:01 2019-05-18 Show GitHub Exploit DB Packet Storm