Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258751 6.8 警告 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4731 2011-06-6 14:46 2011-02-15 Show GitHub Exploit DB Packet Storm
258752 9 危険 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4732 2011-06-6 14:44 2011-02-15 Show GitHub Exploit DB Packet Storm
258753 6.8 警告 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4730 2011-06-6 14:34 2011-02-15 Show GitHub Exploit DB Packet Storm
258754 7.8 危険 Imperva Inc. - Imperva SecureSphere の Web Application Firewall および Database Firewall における intrusion-prevention 機能を回避される脆弱性 CWE-noinfo
情報不足
CVE-2010-1329 2011-06-6 14:29 2010-04-5 Show GitHub Exploit DB Packet Storm
258755 4.3 警告 Imperva Inc. - Imperva SecureSphere MX Management Server の management GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1463 2011-06-6 14:27 2008-03-18 Show GitHub Exploit DB Packet Storm
258756 6.5 警告 バラクーダネットワークス - Barracuda Spam Firewall の Account View ページ内にある index.cgi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1094 2011-06-6 14:23 2008-12-15 Show GitHub Exploit DB Packet Storm
258757 3.5 注意 バラクーダネットワークス - 複数の Barracuda 製品の index.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0971 2011-06-6 14:21 2008-12-15 Show GitHub Exploit DB Packet Storm
258758 4.3 警告 バラクーダネットワークス - Barracuda Spam Firewall の ldap_test.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2333 2011-06-6 14:20 2008-05-22 Show GitHub Exploit DB Packet Storm
258759 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の logText 関数における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題
CVE-2011-1568 2011-06-6 14:19 2011-04-5 Show GitHub Exploit DB Packet Storm
258760 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-0075 2011-06-6 13:56 2011-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247721 5.5 MEDIUM
Local
dcraw_project dcraw A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-19567 2024-11-21 12:58 2018-11-27 Show GitHub Exploit DB Packet Storm
247722 7.1 HIGH
Local
dcraw_project dcraw A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private informati… CWE-125
Out-of-bounds Read
CVE-2018-19566 2024-11-21 12:58 2018-11-27 Show GitHub Exploit DB Packet Storm
247723 7.1 HIGH
Local
dcraw_project dcraw A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private informatio… CWE-125
Out-of-bounds Read
CVE-2018-19565 2024-11-21 12:58 2018-11-27 Show GitHub Exploit DB Packet Storm
247724 6.1 MEDIUM
Network
goldplugins easy_testimonials Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters (_ikcf_client and _ikcf_position and _ikcf_other) have Cross-Site Scripting. CWE-79
Cross-site Scripting
CVE-2018-19564 2024-11-21 12:58 2018-11-27 Show GitHub Exploit DB Packet Storm
247725 8.8 HIGH
Network
phpok phpok An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrade > Compressed Packet Upgrade" action in… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-19562 2024-11-21 12:58 2018-11-26 Show GitHub Exploit DB Packet Storm
247726 8.8 HIGH
Network
sikcms sikcms sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account. CWE-352
 Origin Validation Error
CVE-2018-19561 2024-11-21 12:58 2018-11-26 Show GitHub Exploit DB Packet Storm
247727 8.8 HIGH
Network
bagesoft bagecms BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account. CWE-352
 Origin Validation Error
CVE-2018-19560 2024-11-21 12:58 2018-11-26 Show GitHub Exploit DB Packet Storm
247728 9.8 CRITICAL
Network
cuppacms cuppacms CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the reference_id parameter. CWE-89
SQL Injection
CVE-2018-19559 2024-11-21 12:58 2018-11-26 Show GitHub Exploit DB Packet Storm
247729 9.8 CRITICAL
Network
arcms_project arcms An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php. CWE-89
SQL Injection
CVE-2018-19558 2024-11-21 12:58 2018-11-26 Show GitHub Exploit DB Packet Storm
247730 9.8 CRITICAL
Network
arcms_project arcms An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images. CWE-89
SQL Injection
CVE-2018-19557 2024-11-21 12:58 2018-11-26 Show GitHub Exploit DB Packet Storm