Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258021 4.3 警告 PunBB - PunBB の include/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3371 2011-10-7 11:29 2011-10-2 Show GitHub Exploit DB Packet Storm
258022 9 危険 ヒューレット・パッカード - HP NonStop Servers における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2411 2011-10-7 11:26 2011-09-19 Show GitHub Exploit DB Packet Storm
258023 4.3 警告 TWiki - TWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3010 2011-10-7 11:20 2011-09-22 Show GitHub Exploit DB Packet Storm
258024 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるキー操作を読み取られる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3866 2011-10-7 11:10 2011-09-27 Show GitHub Exploit DB Packet Storm
258025 5 警告 FFmpeg - FFmpeg の libavcodec 内にある cavsdec.c における サービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3973 2011-10-7 10:59 2011-10-2 Show GitHub Exploit DB Packet Storm
258026 6.8 警告 FFmpeg
Libav		 - FFmpeg および libav の decode_residual_block 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3362 2011-10-7 10:58 2011-10-2 Show GitHub Exploit DB Packet Storm
258027 - - Investintech.com Inc. - SlimPDF Reader に複数の脆弱性 - - 2011-10-7 10:56 2011-10-4 Show GitHub Exploit DB Packet Storm
258028 10 危険 Mozilla Foundation - Mozilla Firefox のプラグイン API におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2996 2011-10-5 16:27 2011-09-27 Show GitHub Exploit DB Packet Storm
258029 9.3 危険 FFmpeg - FFmpeg の Matroska フォーマットデコーダにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3504 2011-10-5 16:26 2011-09-29 Show GitHub Exploit DB Packet Storm
258030 4.3 警告 Wibu-Systems AG - Wibu-Systems CodeMeter WebAdmin の Licenses.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3689 2011-10-4 10:29 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251161 6.1 MEDIUM
Network 		rejucms_project rejucms rejucms 2.1 has stored XSS via the admin/book.php content parameter. CWE-79
Cross-site Scripting 		CVE-2018-14838 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
251162 6.5 MEDIUM
Network 		subrion subrion_cms Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to … CWE-269
 Improper Privilege Management 		CVE-2018-14836 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
251163 5.4 MEDIUM
Network 		subrion subrion_cms Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas. CWE-79
Cross-site Scripting 		CVE-2018-14835 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
251164 5.4 MEDIUM
Network 		dleviet datalife_engine An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html and /index.php?do=addnews URIs) to send a malicious script to unsuspecting Admins … CWE-79
Cross-site Scripting 		CVE-2018-14777 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
251165 5.4 MEDIUM
Network 		clickstudios passwordstate Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document. CWE-79
Cross-site Scripting 		CVE-2018-14776 2024-11-21 12:49 2018-08-1 Show GitHub Exploit DB Packet Storm
251166 5.5 MEDIUM
Local 		openbsd openbsd tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access control on the i386 architecture. CWE-20
 Improper Input Validation  		CVE-2018-14775 2024-11-21 12:49 2018-08-1 Show GitHub Exploit DB Packet Storm
251167 7.8 HIGH
Local 		red-gate .net_reflector
smartassembly 		Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific embedded res… CWE-20
 Improper Input Validation  		CVE-2018-14581 2024-11-21 12:49 2018-07-31 Show GitHub Exploit DB Packet Storm
251168 7.8 HIGH
Local 		intenogroup iopsys_firmware read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp. NVD-CWE-noinfo
CVE-2018-14533 2024-11-21 12:49 2018-07-31 Show GitHub Exploit DB Packet Storm
251169 5.3 MEDIUM
Network 		debian
redhat
openstack 		debian_linux
openstack
keystone 		In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing proje… CWE-200
Information Exposure 		CVE-2018-14432 2024-11-21 12:49 2018-07-31 Show GitHub Exploit DB Packet Storm
251170 9.8 CRITICAL
Network 		debian
kamailio 		debian_linux
kamailio 		In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in… CWE-20
 Improper Input Validation  		CVE-2018-14767 2024-11-21 12:49 2018-07-31 Show GitHub Exploit DB Packet Storm