Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257881 | 2.1 | 注意 | アップル | - | Apple iOS のホームスクリーンコンポーネントにおける重要な状態情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3431 | 2011-10-24 16:47 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257882 | 5 | 警告 | アップル | - | Apple iOS の UIKit アラートコンポーネントにおけるサービス運用妨害 (デバイスハング) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-3432 | 2011-10-24 16:46 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257883 | 4.3 | 警告 | アップル | - | Apple iOS の WiFi コンポーネントにおける重要な情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-3434 | 2011-10-24 16:46 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257884 | 4.3 | 警告 | アップル | - | Apple iOS および Safari で使用される WebKit におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3243 | 2011-10-24 16:43 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257885 | 2.1 | 注意 | アップル | - | Apple iOS のキーボードコンポーネントにおける重要な情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-3245 | 2011-10-24 16:43 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257886 | 2.6 | 注意 | アップル | - | Apple iOS の CalDAV における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3253 | 2011-10-24 16:43 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257887 | 4.3 | 警告 | アップル | - | Apple iOS のカレンダーにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3254 | 2011-10-24 16:42 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257888 | 4.3 | 警告 | アップル | - | Apple iOS の CFNetwork における重要な情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-3255 | 2011-10-24 16:33 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257889 | 2.1 | 注意 | アップル | - | Apple iOS の Data Access コンポーネントにおけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-3257 | 2011-10-24 16:32 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257890 | 6.8 | 警告 | アップル | - | Apple iOS の OfficeImport におけるバッファオーバーフローの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-3260 | 2011-10-24 16:30 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249361 | 5.4 |
MEDIUM
Network |
intersystems | cache | Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control. |
CWE-284
Improper Access Control |
CVE-2018-17151 | 2024-11-21 12:53 | 2019-07-12 | Show | GitHub Exploit DB Packet Storm |
| 249362 | 6.1 |
MEDIUM
Network |
intersystems | cache | Intersystems Cache 2017.2.2.865.0 allows XSS. |
CWE-79
Cross-site Scripting |
CVE-2018-17150 | 2024-11-21 12:53 | 2019-07-12 | Show | GitHub Exploit DB Packet Storm |
| 249363 | 4.8 |
MEDIUM
Network |
nagios | nagios_xi | Nagios XI before 5.5.4 has XSS in the auto login admin management page. |
CWE-79
Cross-site Scripting |
CVE-2018-17147 | 2024-11-21 12:53 | 2019-07-10 | Show | GitHub Exploit DB Packet Storm |
| 249364 | 6.5 |
MEDIUM
Adjacent |
sony |
r5c_firmware wd75_firmware wd65_firmware xe70_firmware xf70_firmware we75_firmware we6_firmware wf6_firmware |
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-16595 | 2024-11-21 12:53 | 2019-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249365 | 8.1 |
HIGH
Adjacent |
sony |
r5c_firmware wd75_firmware wd65_firmware xe70_firmware xf70_firmware we75_firmware we6_firmware wf6_firmware |
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal. |
CWE-22
Path Traversal |
CVE-2018-16594 | 2024-11-21 12:53 | 2019-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249366 | 8.8 |
HIGH
Adjacent |
sony |
r5c_firmware wd75_firmware wd65_firmware xe70_firmware xf70_firmware we75_firmware we6_firmware wf6_firmware |
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection. |
CWE-78
OS Command |
CVE-2018-16593 | 2024-11-21 12:53 | 2019-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249367 | 9.8 |
CRITICAL
Network |
nagios | nagios_xi | An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain a… |
CWE-284
Improper Access Control |
CVE-2018-17148 | 2024-11-21 12:53 | 2019-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249368 | 5.4 |
MEDIUM
Network |
nagios | nagios_xi | A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulnerability allows an attacker to execute ar… |
CWE-79
Cross-site Scripting |
CVE-2018-17146 | 2024-11-21 12:53 | 2019-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249369 | 6.1 |
MEDIUM
Network |
zrlog | zrlog | An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area. |
CWE-79
Cross-site Scripting |
CVE-2018-17079 | 2024-11-21 12:53 | 2019-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249370 | 9.8 |
CRITICAL
Network |
vtech | storio_max_firmware | VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for request… |
CWE-78
OS Command |
CVE-2018-16618 | 2024-11-21 12:53 | 2019-06-20 | Show | GitHub Exploit DB Packet Storm |