Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259601	4.3	警告	株式会社ロックオン	-	EC-CUBE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0451	2011-02-2 14:01	2011-02-2	Show	GitHub Exploit DB Packet Storm

259602	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3644	2011-02-1 16:29	2010-11-4	Show	GitHub Exploit DB Packet Storm

259603	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3643	2011-02-1 16:28	2010-11-4	Show	GitHub Exploit DB Packet Storm

259604	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3642	2011-02-1 16:27	2010-11-4	Show	GitHub Exploit DB Packet Storm

259605	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3641	2011-02-1 16:26	2010-11-4	Show	GitHub Exploit DB Packet Storm

259606	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3640	2011-02-1 16:25	2010-11-4	Show	GitHub Exploit DB Packet Storm

259607	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3639	2011-02-1 16:24	2010-11-4	Show	GitHub Exploit DB Packet Storm

259608	9.3	危険	アドビシステムズオラクル	-	Adobe Flash Player の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3637	2011-02-1 16:23	2010-11-4	Show	GitHub Exploit DB Packet Storm

259609	2.6	注意	アップルアドビシステムズレッドハットオラクル	-	Flash Player におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3636	2011-02-1 16:20	2010-11-9	Show	GitHub Exploit DB Packet Storm

259610	8.5	危険	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL の dispatch_command 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2009-2446	2011-02-1 16:19	2009-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307891	-	epractizelabs	subscription_manager	showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.	CWE-20 Improper Input Validation	CVE-2011-5136	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307892	-	docebo	docebolms	Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher…	CWE-89 SQL Injection	CVE-2011-5135	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307893	-	widgetfactorylimited	com_jce	Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arb…	NVD-CWE-Other	CVE-2011-5134	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307894	-	mybb	mybb	Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."	NVD-CWE-noinfo	CVE-2011-5133	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307895	-	mybb	mybb	Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."	CWE-79 Cross-site Scripting	CVE-2011-5132	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307896	-	mybb	mybb	Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the …	CWE-352 Origin Validation Error	CVE-2011-5131	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307897	-	haudenschilt	family_connections_cms	dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.	CWE-94 Code Injection	CVE-2011-5130	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307898	-	xchat	xchat	Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-5129	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

307899	-	bueltge	adminimize	Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) in…	CWE-79 Cross-site Scripting	CVE-2011-5128	2024-11-21 10:33	2012-08-29	Show	GitHub Exploit DB Packet Storm

307900	-	bueltge	adminimize	Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the …	CWE-79 Cross-site Scripting	CVE-2011-4926	2024-11-21 10:33	2012-08-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed