Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258561	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0317	2011-06-29 12:13	2011-06-14	Show	GitHub Exploit DB Packet Storm

258562	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2106	2011-06-29 12:11	2011-06-14	Show	GitHub Exploit DB Packet Storm

258563	4.3	警告	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-119 バッファエラー	CVE-2011-2104	2011-06-29 12:10	2011-06-14	Show	GitHub Exploit DB Packet Storm

258564	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2103	2011-06-29 12:10	2011-06-14	Show	GitHub Exploit DB Packet Storm

258565	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるアクセス制限を回避される脆弱性	CWE-noinfo 情報不足	CVE-2011-2102	2011-06-29 12:08	2011-06-14	Show	GitHub Exploit DB Packet Storm

258566	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2011-2101	2011-06-29 12:07	2011-06-14	Show	GitHub Exploit DB Packet Storm

258567	6.9	警告	アドビシステムズターボリナックス	-	Windows 上で稼働する Adobe Reader および Acrobat における権限昇格の脆弱性	CWE-Other その他	CVE-2011-2100	2011-06-29 12:06	2011-06-14	Show	GitHub Exploit DB Packet Storm

258568	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2099	2011-06-29 12:05	2011-06-14	Show	GitHub Exploit DB Packet Storm

258569	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2098	2011-06-29 12:04	2011-06-14	Show	GitHub Exploit DB Packet Storm

258570	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2097	2011-06-29 12:02	2011-06-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248181	7.2	HIGH Network	oscommerce	oscommerce	osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess' files (e.g., omitting .php) and subseque…	CWE-94 Code Injection	CVE-2018-18573	2024-11-21 12:56	2019-08-23	Show	GitHub Exploit DB Packet Storm

248182	7.2	HIGH Network	oscommerce	oscommerce	osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Because of this filter, script files with certain PHP-related extensions (such as .phtml and .php5) did…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-18572	2024-11-21 12:56	2019-08-23	Show	GitHub Exploit DB Packet Storm

248183	6.1	MEDIUM Network	planonsoftware	planon	Planon before Live Build 41 has XSS.	CWE-79 Cross-site Scripting	CVE-2018-18570	2024-11-21 12:56	2019-07-30	Show	GitHub Exploit DB Packet Storm

248184	6.1	MEDIUM Network	sir	gnuboard	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail …	CWE-79 Cross-site Scripting	CVE-2018-18676	2024-11-21 12:56	2019-07-24	Show	GitHub Exploit DB Packet Storm

248185	6.1	MEDIUM Network	sir	gnuboard	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/board_form_update.php bo_mobile_subject para…	CWE-79 Cross-site Scripting	CVE-2018-18675	2024-11-21 12:56	2019-07-24	Show	GitHub Exploit DB Packet Storm

248186	6.1	MEDIUM Network	sir	gnuboard	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter.	CWE-79 Cross-site Scripting	CVE-2018-18672	2024-11-21 12:56	2019-07-24	Show	GitHub Exploit DB Packet Storm

248187	6.1	MEDIUM Network	sir	gnuboard	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter.	CWE-79 Cross-site Scripting	CVE-2018-18670	2024-11-21 12:56	2019-07-24	Show	GitHub Exploit DB Packet Storm

248188	6.1	MEDIUM Network	sir	gnuboard	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter.	CWE-79 Cross-site Scripting	CVE-2018-18673	2024-11-21 12:56	2019-07-24	Show	GitHub Exploit DB Packet Storm

248189	6.1	MEDIUM Network	sir	gnuboard	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/board_form_update.php bo_mobile_content_head …	CWE-79 Cross-site Scripting	CVE-2018-18671	2024-11-21 12:56	2019-07-24	Show	GitHub Exploit DB Packet Storm

248190	6.1	MEDIUM Network	sir	gnuboard	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter.	CWE-79 Cross-site Scripting	CVE-2018-18669	2024-11-21 12:56	2019-07-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed