Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240781 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-0467 2012-07-23 17:54 2012-04-24 Show GitHub Exploit DB Packet Storm
240782 7.2 危険 日立 - 日立の JP1/NETM/DM のパッケージセットアップマネージャにおける権限昇格の脆弱性 CWE-noinfo
情報不足
- 2012-07-23 16:14 2012-07-13 Show GitHub Exploit DB Packet Storm
240783 8.5 危険 OSIsoft - OSIsoft PI OPC DA Interface におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3008 2012-07-23 16:01 2012-07-19 Show GitHub Exploit DB Packet Storm
240784 4.3 警告 IBM - IBM Lotus Protector for Mail Security および Proventia Network Mail Security System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2955 2012-07-23 15:57 2012-07-20 Show GitHub Exploit DB Packet Storm
240785 4 警告 Moodle - Moodle における電子メールアドレスを見つけられる脆弱性 CWE-200
情報漏えい
CVE-2011-4593 2012-07-23 15:51 2011-12-6 Show GitHub Exploit DB Packet Storm
240786 5 警告 Moodle - Moodle のコマンドラインクローンの実装における IP アドレスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4592 2012-07-23 15:48 2011-12-6 Show GitHub Exploit DB Packet Storm
240787 4.3 警告 Moodle - Moodle の lib/datalib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4591 2012-07-23 15:40 2011-12-6 Show GitHub Exploit DB Packet Storm
240788 4 警告 Moodle - Moodle の Web サービスの実装におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-4590 2012-07-23 15:32 2011-12-6 Show GitHub Exploit DB Packet Storm
240789 5.5 警告 Moodle - Moodle の backup/moodle2/restore_stepslib.php における ID 番号を上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4589 2012-07-23 15:26 2011-12-6 Show GitHub Exploit DB Packet Storm
240790 5 警告 Moodle - Moodle の MNet 内の mnet/lib.php における IP アドレスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4588 2012-07-23 15:23 2011-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268221 8.8 HIGH
Network
hitachivantara pentaho_business_analytics In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application. CWE-352
 Origin Validation Error
CVE-2016-10701 2024-11-21 11:44 2017-11-28 Show GitHub Exploit DB Packet Storm
268222 8.8 HIGH
Network
cacti cacti auth_login.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database, because the… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10700 2024-11-21 11:44 2017-11-24 Show GitHub Exploit DB Packet Storm
268223 6.1 MEDIUM
Network
dlink dsl-2740e_firmware D-Link DSL-2740E 1.00_BG_20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in the… CWE-79
Cross-site Scripting
CVE-2016-10699 2024-11-21 11:44 2017-10-31 Show GitHub Exploit DB Packet Storm
268224 7.4 HIGH
Network
redislabs redis networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack … CWE-254
 7PK - Security Features
CVE-2016-10517 2024-11-21 11:44 2017-10-25 Show GitHub Exploit DB Packet Storm
268225 6.1 MEDIUM
Network
palletsprojects werkzeug Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote… CWE-79
Cross-site Scripting
CVE-2016-10516 2024-11-21 11:44 2017-10-24 Show GitHub Exploit DB Packet Storm
268226 6.1 MEDIUM
Network
redmine redmine In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages. CWE-79
Cross-site Scripting
CVE-2016-10515 2024-11-21 11:44 2017-10-18 Show GitHub Exploit DB Packet Storm
268227 6.5 MEDIUM
Network
piwigo piwigo url_check_format in include/functions.inc.php in Piwigo before 2.8.3 allows remote attackers to bypass intended access restrictions via a URL that contains a " character, or a URL beginning with a su… CWE-284
Improper Access Control
CVE-2016-10514 2024-11-21 11:44 2017-10-11 Show GitHub Exploit DB Packet Storm
268228 6.1 MEDIUM
Network
piwigo piwigo Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php. CWE-79
Cross-site Scripting
CVE-2016-10513 2024-11-21 11:44 2017-10-11 Show GitHub Exploit DB Packet Storm
268229 9.8 CRITICAL
Network
multitech faxfinder MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP con… CWE-255
Credentials Management
CVE-2016-10512 2024-11-21 11:44 2017-09-30 Show GitHub Exploit DB Packet Storm
268230 5.9 MEDIUM
Network
twitter twitter The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the abili… CWE-295
Improper Certificate Validation 
CVE-2016-10511 2024-11-21 11:44 2017-09-19 Show GitHub Exploit DB Packet Storm