|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 18, 2026, 2:16 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 240541 | 4.3 | 警告 | OBM | - | Open Business Management におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2011-5143 | 2012-09-5 11:11 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240542 | 4.3 | 警告 | OBM | - | Open Business Management におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2011-5142 | 2012-09-5 11:10 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240543 | 6 | 警告 | OBM | - | Open Business Management の exportcsv/exportcsv_index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-5141 | 2012-09-5 11:09 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240544 | 7.5 | 危険 | diy-cms | - | DiY-CMS 用 blog モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-5140 | 2012-09-5 11:05 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240545 | 7.5 | 危険 | PreProject.com | - | Pre Studio Business Cards Designer の page.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-5139 | 2012-09-5 11:00 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240546 | 4.3 | 警告 | tForum | - | tForum の member.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2011-5138 | 2012-09-5 10:59 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240547 | 7.5 | 危険 | tForum | - | tForum における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-5137 | 2012-09-5 10:58 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240548 | 9.3 | 危険 | Viscom Software | - | Viscom Image Viewer CP Pro および Gold におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-5194 | 2012-09-5 10:57 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240549 | 9.3 | 危険 | Viscom Software | - | Viscom Image Viewer CP Pro および Gold におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-5193 | 2012-09-5 10:55 | 2012-08-31 | Show | GitHub Exploit DB Packet Storm |
| 240550 | 4.3 | 警告 | バラクーダネットワークス | - | Barracuda SSL VPN におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2012-4739 | 2012-09-5 10:06 | 2012-07-16 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 18, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 267511 | 6.5 |
MEDIUM
Network |
debian canonical redhat suse opensuse |
debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse chrome |
WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl paramet… |
CWE-284
Improper Access Control |
CVE-2016-1699 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267512 | 8.8 |
HIGH
Network |
google debian canonical redhat suse opensuse |
chrome debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse |
The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detac… |
CWE-284
Improper Access Control |
CVE-2016-1697 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267513 | 5.3 |
MEDIUM
Network |
google debian redhat suse opensuse |
chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse |
browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid … |
CWE-284
Improper Access Control |
CVE-2016-1694 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267514 | 5.3 |
MEDIUM
Network |
debian redhat suse opensuse |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse chrome |
browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to… |
CWE-284
Improper Access Control |
CVE-2016-1693 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267515 | 5.3 |
MEDIUM
Network |
debian canonical redhat suse opensuse |
debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse chrome |
WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet downl… |
CWE-284
Improper Access Control |
CVE-2016-1692 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267516 | 6.5 |
MEDIUM
Network |
debian canonical redhat suse opensuse |
debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse chrome |
Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified o… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-1689 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267517 | 6.5 |
MEDIUM
Network |
debian canonical redhat suse opensuse |
debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse chrome v8 |
The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to caus… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-1688 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267518 | 6.5 |
MEDIUM
Network |
debian redhat suse opensuse |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse chrome |
The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors relat… |
CWE-200
Information Exposure |
CVE-2016-1687 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267519 | 6.5 |
MEDIUM
Network |
google debian redhat suse opensuse |
chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse |
The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, wh… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-1686 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |
| 267520 | 7.5 |
HIGH
Network |
debian canonical redhat suse opensuse |
debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux_enterprise leap opensuse chrome |
Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified o… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-1691 | 2024-11-21 11:46 | 2016-06-6 | Show | GitHub Exploit DB Packet Storm |