Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249971 4.3 警告 Apache Software Foundation - Apache Struts の javatemplates プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2087 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
249972 5 警告 inventivetec - MediaCAST における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2081 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
249973 7.5 危険 inventivetec - MediaCAST における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2080 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
249974 7.5 危険 inventivetec - MediaCAST における詳細不明な影響を受ける脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2079 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
249975 4.3 警告 inventivetec - MediaCAST の New Atlanta BlueDragon 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2078 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
249976 7.5 危険 inventivetec - MediaCAST の New Atlanta BlueDragon 管理インターフェースのデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2011-2077 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
249977 5 警告 inventivetec - MediaCAST における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2076 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
249978 8.5 危険 Skype Technologies S.A. - Skype のクライアントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2074 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
249979 4.3 警告 SquirrelMail Project - SquirrelMail の functions/mime.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2023 2012-03-27 18:43 2011-07-10 Show GitHub Exploit DB Packet Storm
249980 4.3 警告 TIBCO Software - TIBCO iProcess Engine および iProcess Workspace におけるセッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2011-2021 2012-03-27 18:43 2011-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346641 - bakbone netvault nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu. NVD-CWE-Other
CVE-2005-1372 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346642 - dream4 koobi_cms Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters. NVD-CWE-Other
CVE-2005-1373 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346643 - claroline claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via (1) exer… NVD-CWE-Other
CVE-2005-1374 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346644 - claroline claroline Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) … NVD-CWE-Other
CVE-2005-1375 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346645 - claroline claroline Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to… NVD-CWE-Other
CVE-2005-1376 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346646 - claroline claroline Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors. NVD-CWE-Other
CVE-2005-1377 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346647 - oxpus phpbb_personal_notes_module SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, a… NVD-CWE-Other
CVE-2005-1378 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346648 - bea weblogic_server Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web script or HTML via the server parameter to a JndiFramesetAction action. NVD-CWE-Other
CVE-2005-1380 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346649 - oracle application_server_web_cache Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage paramet… NVD-CWE-Other
CVE-2005-1381 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm
346650 - oracle application_server_web_cache The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter. NVD-CWE-Other
CVE-2005-1382 2017-07-11 10:32 2005-05-3 Show GitHub Exploit DB Packet Storm