Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258031 5 警告 NetSaro - NetSaro Enterprise Messenger Server におけるアプリケーションのソースコードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-3694 2011-10-4 10:28 2011-09-27 Show GitHub Exploit DB Packet Storm
258032 1.9 注意 NetSaro - NetSaro Enterprise Messenger Server における平文のサーバ資格情報を発見される脆弱性 CWE-310
暗号の問題 		CVE-2011-3693 2011-10-4 10:25 2011-09-27 Show GitHub Exploit DB Packet Storm
258033 1.9 注意 NetSaro - NetSaro Enterprise Messenger Server における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3692 2011-10-4 10:06 2011-09-27 Show GitHub Exploit DB Packet Storm
258034 6.9 警告 Foxit Software Inc - Foxit Reader における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-3691 2011-10-4 10:01 2011-09-27 Show GitHub Exploit DB Packet Storm
258035 6.9 警告 PlotSoft L.L.C. - PlotSoft PDFill PDF Editor における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-3690 2011-10-4 10:00 2011-09-27 Show GitHub Exploit DB Packet Storm
258036 7.5 危険 Sonexis Technology, Inc. - Sonexis ConferenceManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3688 2011-10-4 09:45 2011-09-27 Show GitHub Exploit DB Packet Storm
258037 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3687 2011-10-3 14:56 2011-09-27 Show GitHub Exploit DB Packet Storm
258038 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3686 2011-10-3 14:55 2011-09-27 Show GitHub Exploit DB Packet Storm
258039 1.9 注意 Tembria - Tembria Server Monitor における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3685 2011-10-3 14:54 2011-09-27 Show GitHub Exploit DB Packet Storm
258040 4.3 警告 Tembria - Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3684 2011-10-3 14:52 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249701 6.1 MEDIUM
Network 		chshcms cscms \upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name. CWE-79
Cross-site Scripting 		CVE-2018-16730 2024-11-21 12:53 2018-09-9 Show GitHub Exploit DB Packet Storm
249702 6.1 MEDIUM
Network 		baijiacms_project baijiacms An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component." CWE-79
Cross-site Scripting 		CVE-2018-16725 2024-11-21 12:53 2018-09-9 Show GitHub Exploit DB Packet Storm
249703 9.8 CRITICAL
Network 		baijiacms_project baijiacms An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request. CWE-89
SQL Injection 		CVE-2018-16724 2024-11-21 12:53 2018-09-9 Show GitHub Exploit DB Packet Storm
249704 8.8 HIGH
Network 		absolute ctes_windows_agent An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-16715 2024-11-21 12:53 2018-09-8 Show GitHub Exploit DB Packet Storm
249705 9.1 CRITICAL
Network 		octoprint octoprint OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report … CWE-200
Information Exposure 		CVE-2018-16710 2024-11-21 12:53 2018-09-8 Show GitHub Exploit DB Packet Storm
249706 9.8 CRITICAL
Network 		fujixerox docucentre-v_3065_firmware
apeosport-v_c4475_firmware
apeosport-vi_c3371_firmware
apeosport-v_c3375_firmware
docucentre-vi_c2271_firmware
apeosport-v_c5576_firmware
docucentre-iv_c2… 		Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices a… NVD-CWE-noinfo
CVE-2018-16709 2024-11-21 12:53 2018-09-8 Show GitHub Exploit DB Packet Storm
249707 4.3 MEDIUM
Network 		gleeztech gleezcms An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to view profile page of other users, as demon… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2018-16704 2024-11-21 12:53 2018-09-8 Show GitHub Exploit DB Packet Storm
249708 5.3 MEDIUM
Network 		gleeztech gleez_cms A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, which can further help an attacker to perform login attempts i… CWE-307
CWE-521
CWE-732
mproper Restriction of Excessive Authentication Attempts
Weak Password Requirements 
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-16703 2024-11-21 12:53 2018-09-8 Show GitHub Exploit DB Packet Storm
249709 7.0 HIGH
Local 		contiki-ng contiki-ng. An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL (lvm_register_variable, lvm_set_variable_value, create_intersec… CWE-125
Out-of-bounds Read 		CVE-2018-16667 2024-11-21 12:53 2018-09-8 Show GitHub Exploit DB Packet Storm
249710 7.8 HIGH
Local 		contiki-ng contiki-ng. An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in next_string in os/storage/antelope/aql-lexer.c while parsing AQL (parsing next string). CWE-787
 Out-of-bounds Write 		CVE-2018-16666 2024-11-21 12:53 2018-09-8 Show GitHub Exploit DB Packet Storm