Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240711 6.9 警告 ソフォス - 複数の Sophos 製品におけるフルディスク暗号化の機能を破られる脆弱性 CWE-362
競合状態 		CVE-2011-5117 2012-08-27 14:35 2011-01-6 Show GitHub Exploit DB Packet Storm
240712 7.5 危険 SetSeed - SetSeed CMS の setseed-hub における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5116 2012-08-27 14:34 2012-08-23 Show GitHub Exploit DB Packet Storm
240713 4.3 警告 DLGuard - DLGuard におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5115 2012-08-27 14:34 2012-08-23 Show GitHub Exploit DB Packet Storm
240714 4.3 警告 バラクーダネットワークス - Barracuda Link Balancer 330 ファームウェア におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5114 2012-08-27 14:33 2012-08-23 Show GitHub Exploit DB Packet Storm
240715 7.5 危険 Techdeluge - Joomla! 用 Techfolio コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5113 2012-08-27 14:32 2012-08-23 Show GitHub Exploit DB Packet Storm
240716 7.5 危険 E. Wayne Madison - Joomla! 用 Alameda コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5112 2012-08-27 14:31 2011-11-9 Show GitHub Exploit DB Packet Storm
240717 7.5 危険 kajianwebsite.org - Kajian Website CMS Balitbang における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5111 2012-08-27 14:31 2012-08-23 Show GitHub Exploit DB Packet Storm
240718 7.5 危険 John Geo - Blogs Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5110 2012-08-27 14:30 2012-08-23 Show GitHub Exploit DB Packet Storm
240719 7.5 危険 John Geo - Freelancer calendar における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5109 2012-08-27 14:29 2012-08-23 Show GitHub Exploit DB Packet Storm
240720 4.3 警告 AdaptCMS - AdaptCMS の config.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5108 2012-08-27 14:29 2012-08-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267041 2.4 LOW
Physics 		apple iphone_os Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via… CWE-200
Information Exposure 		CVE-2016-1852 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267042 4.6 MEDIUM
Physics 		apple mac_os_x The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vect… NVD-CWE-noinfo
CVE-2016-1851 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267043 7.8 HIGH
Local 		apple mac_os_x SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1850 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267044 3.3 LOW
Local 		apple safari
iphone_os 		The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the deletion of browsing history, which might allow local users t… CWE-200
Information Exposure 		CVE-2016-1849 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267045 7.8 HIGH
Local 		apple mac_os_x QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1848 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267046 8.8 HIGH
Network 		apple iphone_os
mac_os_x
tvos
watchos 		OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1847 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267047 7.8 HIGH
Local 		apple mac_os_x The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1846 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267048 5.3 MEDIUM
Network 		apple mac_os_x The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-1844 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267049 7.5 HIGH
Network 		apple mac_os_x The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2016-1843 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
267050 7.5 HIGH
Network 		apple iphone_os
mac_os_x
watchos 		MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the netw… CWE-284
Improper Access Control 		CVE-2016-1842 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm