Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257751 4.3 警告 Simple Machines - Simple Machines Forum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4173 2011-10-31 14:07 2011-09-18 Show GitHub Exploit DB Packet Storm
257752 4.3 警告 KENT-WEB - KENT-WEB WEB FORUM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4172 2011-10-31 14:05 2011-10-24 Show GitHub Exploit DB Packet Storm
257753 4.3 警告 IBM - IBM WebSphere ILOG Rule Team Server の content/error.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4171 2011-10-31 14:00 2011-10-5 Show GitHub Exploit DB Packet Storm
257754 7.5 危険 Simple Machines - Simple Machines Forum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3615 2011-10-31 13:59 2011-09-18 Show GitHub Exploit DB Packet Storm
257755 9.3 危険 Novell - Novell ZENworks Handheld Management (ZHM) の ZfHSrvr.exe における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2656 2011-10-31 13:59 2011-10-5 Show GitHub Exploit DB Packet Storm
257756 9.3 危険 Novell - Novell ZENworks Handheld Management (ZHM) の ZfHSrvr.exe における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2655 2011-10-31 13:57 2011-10-5 Show GitHub Exploit DB Packet Storm
257757 6.8 警告 Digium - Asterisk Open Source の chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4063 2011-10-31 10:31 2011-10-4 Show GitHub Exploit DB Packet Storm
257758 7.5 危険 Atcom S.A. - ATCOM Netvolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3340 2011-10-31 10:29 2011-10-21 Show GitHub Exploit DB Packet Storm
257759 6.5 警告 BlackBerry - BlackBerry Collaboration Service における任意のユーザアカウントへログインされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0290 2011-10-31 10:29 2011-10-11 Show GitHub Exploit DB Packet Storm
257760 7.5 危険 Atcom S.A. - ATCOM Netvolution の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4967 2011-10-31 10:28 2011-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246971 8.8 HIGH
Network 		pivotal_software pivotal_cloud_cache Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs could escalate their privileges using thi… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2018-1198 2024-11-21 12:59 2018-09-18 Show GitHub Exploit DB Packet Storm
246972 7.5 HIGH
Network 		apache mesos When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libproces… CWE-20
 Improper Input Validation  		CVE-2018-1330 2024-11-21 12:59 2018-09-14 Show GitHub Exploit DB Packet Storm
246973 8.1 HIGH
Network 		redhat gluster_storage Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens… CWE-384
 Session Fixation 		CVE-2018-1127 2024-11-21 12:59 2018-09-12 Show GitHub Exploit DB Packet Storm
246974 6.5 MEDIUM
Network 		redhat virtualization_host
virtualization
undertow 		It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak. CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-1114 2024-11-21 12:59 2018-09-12 Show GitHub Exploit DB Packet Storm
246975 4.3 MEDIUM
Network 		fortinet fortimanager An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned ad… CWE-200
Information Exposure 		CVE-2018-1353 2024-11-21 12:59 2018-09-5 Show GitHub Exploit DB Packet Storm
246976 7.5 HIGH
Network 		apache
debian 		traffic_server
debian_linux 		Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server (ATS) 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolv… CWE-20
 Improper Input Validation  		CVE-2018-1318 2024-11-21 12:59 2018-08-29 Show GitHub Exploit DB Packet Storm
246977 6.5 MEDIUM
Network 		mikrotik routeros Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash the HTTP server by rapidly authenticating and disconnecting. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-1159 2024-11-21 12:59 2018-08-24 Show GitHub Exploit DB Packet Storm
246978 6.5 MEDIUM
Network 		mikrotik routeros Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. CWE-674
 Uncontrolled Recursion 		CVE-2018-1158 2024-11-21 12:59 2018-08-24 Show GitHub Exploit DB Packet Storm
246979 6.5 MEDIUM
Network 		mikrotik routeros Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system v… CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-1157 2024-11-21 12:59 2018-08-24 Show GitHub Exploit DB Packet Storm
246980 8.8 HIGH
Network 		mikrotik routeros Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically allow a remote authenticated attacker e… CWE-787
 Out-of-bounds Write 		CVE-2018-1156 2024-11-21 12:59 2018-08-24 Show GitHub Exploit DB Packet Storm