Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258191	4.3	警告	マイクロソフト	-	Microsoft Visual Studio および Report Viewer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1976	2011-08-25 10:00	2011-08-9	Show	GitHub Exploit DB Packet Storm

258192	4.3	警告	マイクロソフト	-	Microsoft .NET Framework における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1977	2011-08-25 09:54	2011-08-9	Show	GitHub Exploit DB Packet Storm

258193	7.1	危険	マイクロソフト	-	Microsoft Windows の RDP 実装におけるサービス運用妨害 (リブート) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1968	2011-08-25 09:50	2011-08-9	Show	GitHub Exploit DB Packet Storm

258194	7.1	危険	マイクロソフト	-	Microsoft Windows の TCP/IP スタック内にある Tcpip.sys におけるサービス運用妨害 (リブート) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1965	2011-08-24 10:20	2011-08-9	Show	GitHub Exploit DB Packet Storm

258195	7.8	危険	マイクロソフト	-	Microsoft Windows の TCP/IP スタック内にある Tcpip.sys におけるサービス運用妨害 (リブート) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1871	2011-08-24 10:19	2011-08-9	Show	GitHub Exploit DB Packet Storm

258196	7.2	危険	マイクロソフト	-	Microsoft Windows の Win32 サブシステム内にある CSRSS の Winsrv.dll における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1967	2011-08-24 10:18	2011-08-9	Show	GitHub Exploit DB Packet Storm

258197	7.2	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 の RAS 内にある NDISTAPI.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1974	2011-08-24 10:17	2011-08-9	Show	GitHub Exploit DB Packet Storm

258198	4.3	警告	マイクロソフト	-	Microsoft Windows Server 2008 R2 の RD Web Access におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1263	2011-08-24 10:16	2011-08-9	Show	GitHub Exploit DB Packet Storm

258199	6.2	警告	サイバートラスト株式会社 Linux	-	Linux kernel の kernel/exit.c 内にある do_exit 関数における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4258	2011-08-24 10:11	2010-12-9	Show	GitHub Exploit DB Packet Storm

258200	9.3	危険	マイクロソフト	-	Microsoft Visio における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1979	2011-08-23 10:06	2011-08-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249421	4.8	MEDIUM Network	getkirby	kirby	Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.	CWE-79 Cross-site Scripting	CVE-2018-16630	2024-11-21 12:53	2018-12-29	Show	GitHub Exploit DB Packet Storm

249422	6.1	MEDIUM Network	jenzabar	jenzabar	Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field).	CWE-79 Cross-site Scripting	CVE-2018-16778	2024-11-21 12:53	2018-12-22	Show	GitHub Exploit DB Packet Storm

249423	6.1	MEDIUM Network	getkirby	kirby	panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.	CWE-74 Injection	CVE-2018-16627	2024-11-21 12:53	2018-12-21	Show	GitHub Exploit DB Packet Storm

249424	5.5	MEDIUM Local	fedoraproject	sssd	sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user di…	CWE-200 Information Exposure	CVE-2018-16883	2024-11-21 12:53	2018-12-19	Show	GitHub Exploit DB Packet Storm

249425	8.0	HIGH Adjacent	linux redhat debian canonical	linux_kernel enterprise_linux enterprise_mrg debian_linux ubuntu_linux	A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-af…	-	CVE-2018-16884	2024-11-21 12:53	2018-12-19	Show	GitHub Exploit DB Packet Storm

249426	7.5	HIGH Adjacent	swisscom	internet-box_standard_firmware internet-box_light_firmware internet-box_plus_firmware internet-box_2_firmware	A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box (2, Standard, and Plus) prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows rem…	CWE-787 Out-of-bounds Write	CVE-2018-16596	2024-11-21 12:53	2018-12-18	Show	GitHub Exploit DB Packet Storm

249427	7.5	HIGH Network	golang opensuse	go leap	The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs …	CWE-295 Improper Certificate Validation	CVE-2018-16875	2024-11-21 12:53	2018-12-14	Show	GitHub Exploit DB Packet Storm

249428	8.1	HIGH Network	golang opensuse suse debian	go leap linux_enterprise_server backports_sle debian_linux	In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both …	-	CVE-2018-16874	2024-11-21 12:53	2018-12-14	Show	GitHub Exploit DB Packet Storm

249429	8.1	HIGH Network	golang opensuse suse debian	go leap linux_enterprise_server backports_sle debian_linux	In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package th…	-	CVE-2018-16873	2024-11-21 12:53	2018-12-14	Show	GitHub Exploit DB Packet Storm

249430	5.3	MEDIUM Network	qemu debian fedoraproject canonical opensuse	qemu debian_linux fedora ubuntu_linux leap	A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn't consider that the…	-	CVE-2018-16872	2024-11-21 12:53	2018-12-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed