Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250661 3.5 注意 Roundcube.net - Roundcube Webmail のログインフォームにおける重要な情報を取得されるの脆弱性 CWE-20
不適切な入力確認
CVE-2011-1491 2012-03-27 18:43 2011-04-8 Show GitHub Exploit DB Packet Storm
250662 6.8 警告 レッドハット - Red Hat JBoss Enterprise SOA Platform および JBoss Enterprise Application Platform の JBoss Seam 2 framework の jboss-seam.jar における任意の Java コード実行を引き起こす脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1484 2012-03-27 18:43 2011-04-20 Show GitHub Exploit DB Packet Storm
250663 6.8 警告 PHPNUKE - Francisco Burzi PHP-Nuke の mainfile.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1482 2012-03-27 18:43 2011-06-20 Show GitHub Exploit DB Packet Storm
250664 4.3 警告 PHPNUKE - Francisco Burzi PHP-Nuke におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1481 2012-03-27 18:43 2011-06-20 Show GitHub Exploit DB Packet Storm
250665 3.5 注意 Liferay - Liferay Portal CE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1504 2012-03-27 18:43 2010-07-22 Show GitHub Exploit DB Packet Storm
250666 3.5 注意 Liferay
Apache Software Foundation
オラクル
- Liferay Portal CE の XSL Content portlet における任意の XSL および XML ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-1503 2012-03-27 18:43 2010-11-9 Show GitHub Exploit DB Packet Storm
250667 7.5 危険 PHPNUKE - Francisco Burzi PHP-Nuke の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1480 2012-03-27 18:43 2011-06-20 Show GitHub Exploit DB Packet Storm
250668 7.2 危険 ノキア - Nokia E75 携帯端末におけるデバイスロックコード回避の脆弱性 CWE-287
不適切な認証
CVE-2011-1472 2012-03-27 18:43 2011-03-29 Show GitHub Exploit DB Packet Storm
250669 4.3 警告 The PHP Group - PHP の strval 関数におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-1464 2012-03-27 18:43 2011-03-19 Show GitHub Exploit DB Packet Storm
250670 5 警告 OTRS プロジェクト - OTRS の AgentInterface または CustomerInterface コンポーネントにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-1433 2012-03-27 18:43 2011-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223651 6.1 MEDIUM
Network
yunucms yunucms An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter. CWE-79
Cross-site Scripting
CVE-2019-5311 2024-11-21 13:44 2019-01-5 Show GitHub Exploit DB Packet Storm
223652 6.1 MEDIUM
Network
yunucms yunucms YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request. CWE-79
Cross-site Scripting
CVE-2019-5310 2024-11-21 13:44 2019-01-4 Show GitHub Exploit DB Packet Storm
223653 7.2 HIGH
Network
vtiger vtiger_crm Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into th… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-5009 2024-11-21 13:44 2019-01-4 Show GitHub Exploit DB Packet Storm
223654 7.1 HIGH
Local
foxitsoftware foxit_reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data dur… CWE-125
CWE-476
Out-of-bounds Read
 NULL Pointer Dereference
CVE-2019-5007 2024-11-21 13:44 2019-01-4 Show GitHub Exploit DB Packet Storm
223655 5.5 MEDIUM
Local
foxitsoftware foxit_reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is a NULL pointer dereference during PDF parsing. CWE-476
 NULL Pointer Dereference
CVE-2019-5006 2024-11-21 13:44 2019-01-4 Show GitHub Exploit DB Packet Storm
223656 5.5 MEDIUM
Local
foxitsoftware foxit_reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the alloca… CWE-787
 Out-of-bounds Write
CVE-2019-5005 2024-11-21 13:44 2019-01-4 Show GitHub Exploit DB Packet Storm
223657 9.8 CRITICAL
Network
ibm financial_transaction_manager IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which coul… CWE-89
SQL Injection
CVE-2019-4575 2024-11-21 13:43 2022-06-16 Show GitHub Exploit DB Packet Storm
223658 2.4 LOW
Physics
ibm maximo_anywhere IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494. NVD-CWE-noinfo
CVE-2019-4352 2024-11-21 13:43 2022-02-17 Show GitHub Exploit DB Packet Storm
223659 4.6 MEDIUM
Physics
ibm maximo_anywhere IBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with physical access to the device. IBM X-Force ID: 161493. NVD-CWE-noinfo
CVE-2019-4351 2024-11-21 13:43 2022-02-17 Show GitHub Exploit DB Packet Storm
223660 6.5 MEDIUM
Network
ibm maximo_anywhere IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697. CWE-326
Inadequate Encryption Strength
CVE-2019-4291 2024-11-21 13:43 2022-02-17 Show GitHub Exploit DB Packet Storm