Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258031 5 警告 NetSaro - NetSaro Enterprise Messenger Server におけるアプリケーションのソースコードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-3694 2011-10-4 10:28 2011-09-27 Show GitHub Exploit DB Packet Storm
258032 1.9 注意 NetSaro - NetSaro Enterprise Messenger Server における平文のサーバ資格情報を発見される脆弱性 CWE-310
暗号の問題 		CVE-2011-3693 2011-10-4 10:25 2011-09-27 Show GitHub Exploit DB Packet Storm
258033 1.9 注意 NetSaro - NetSaro Enterprise Messenger Server における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3692 2011-10-4 10:06 2011-09-27 Show GitHub Exploit DB Packet Storm
258034 6.9 警告 Foxit Software Inc - Foxit Reader における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-3691 2011-10-4 10:01 2011-09-27 Show GitHub Exploit DB Packet Storm
258035 6.9 警告 PlotSoft L.L.C. - PlotSoft PDFill PDF Editor における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-3690 2011-10-4 10:00 2011-09-27 Show GitHub Exploit DB Packet Storm
258036 7.5 危険 Sonexis Technology, Inc. - Sonexis ConferenceManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3688 2011-10-4 09:45 2011-09-27 Show GitHub Exploit DB Packet Storm
258037 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3687 2011-10-3 14:56 2011-09-27 Show GitHub Exploit DB Packet Storm
258038 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3686 2011-10-3 14:55 2011-09-27 Show GitHub Exploit DB Packet Storm
258039 1.9 注意 Tembria - Tembria Server Monitor における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3685 2011-10-3 14:54 2011-09-27 Show GitHub Exploit DB Packet Storm
258040 4.3 警告 Tembria - Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3684 2011-10-3 14:52 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247651 6.1 MEDIUM
Network 		adiscon loganalyzer login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field. CWE-79
Cross-site Scripting 		CVE-2018-19877 2024-11-21 12:58 2018-12-6 Show GitHub Exploit DB Packet Storm
247652 6.5 MEDIUM
Network 		cairographics cairo cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid… CWE-416
 Use After Free 		CVE-2018-19876 2024-11-21 12:58 2018-12-6 Show GitHub Exploit DB Packet Storm
247653 7.5 HIGH
Network 		qt
opensuse 		qt
leap 		A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2018-19865 2024-11-21 12:58 2018-12-5 Show GitHub Exploit DB Packet Storm
247654 9.8 CRITICAL
Network 		nuuo nvrmini2_firmware NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds… CWE-119
CWE-20
Incorrect Access of Indexable Resource ('Range Error') 
 Improper Input Validation  		CVE-2018-19864 2024-11-21 12:58 2018-12-5 Show GitHub Exploit DB Packet Storm
247655 6.5 MEDIUM
Network 		openrefine openrefine OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive. CWE-22
Path Traversal 		CVE-2018-19859 2024-11-21 12:58 2018-12-5 Show GitHub Exploit DB Packet Storm
247656 9.1 CRITICAL
Network 		videolan
debian 		vlc_media_player
debian_linux 		The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast conv… CWE-824
 Access of Uninitialized Pointer 		CVE-2018-19857 2024-11-21 12:58 2018-12-5 Show GitHub Exploit DB Packet Storm
247657 8.1 HIGH
Network 		hashicorp vault HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being rep… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2018-19786 2024-11-21 12:58 2018-12-5 Show GitHub Exploit DB Packet Storm
247658 4.7 MEDIUM
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures tha… CWE-200
Information Exposure 		CVE-2018-19854 2024-11-21 12:58 2018-12-5 Show GitHub Exploit DB Packet Storm
247659 7.5 HIGH
Network 		gnu
fedoraproject 		glibc
fedora 		In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related t… CWE-20
 Improper Input Validation  		CVE-2018-19591 2024-11-21 12:58 2018-12-5 Show GitHub Exploit DB Packet Storm
247660 8.8 HIGH
Network 		hitshop_project hitshop An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole web site) via the admin.php/user/add URI because a storekee… CWE-269
 Improper Privilege Management 		CVE-2018-19853 2024-11-21 12:58 2018-12-4 Show GitHub Exploit DB Packet Storm