Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240891 4 警告 Moodle - Moodle におけるサービス運用妨害 (不正なデータベースレコード) の脆弱性 CWE-89
SQLインジェクション
CVE-2011-4292 2012-07-18 18:12 2011-05-18 Show GitHub Exploit DB Packet Storm
240892 4 警告 Moodle - Moodle におけるサービス運用妨害 (不正なデータベースレコード) の脆弱性 CWE-noinfo
情報不足
CVE-2011-4291 2012-07-18 18:10 2011-05-18 Show GitHub Exploit DB Packet Storm
240893 4.3 警告 Moodle - Moodle の lib/weblib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4290 2012-07-18 18:10 2011-05-18 Show GitHub Exploit DB Packet Storm
240894 4 警告 Moodle - Moodle における重要なアドレス情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4289 2012-07-18 18:09 2011-05-18 Show GitHub Exploit DB Packet Storm
240895 4 警告 Moodle - Moodle における任意の生徒のクイズレポートを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4288 2012-07-18 18:07 2011-05-18 Show GitHub Exploit DB Packet Storm
240896 6.8 警告 Moodle - Moodle の admin/uploaduser_form.php におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4287 2012-07-18 18:06 2011-05-18 Show GitHub Exploit DB Packet Storm
240897 4.3 警告 Moodle - Moodle の filter/mediaplugin/filter.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4286 2012-07-18 18:06 2011-03-1 Show GitHub Exploit DB Packet Storm
240898 5.5 警告 Moodle - Moodle のデフォルト設定における任意のコースを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4285 2012-07-18 18:04 2011-03-1 Show GitHub Exploit DB Packet Storm
240899 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4284 2012-07-18 17:55 2011-03-1 Show GitHub Exploit DB Packet Storm
240900 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4283 2012-07-18 17:53 2011-03-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266821 7.5 HIGH
Network
nodejs
fedoraproject
node.js
fedora
The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response… CWE-20
 Improper Input Validation 
CVE-2016-2216 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266822 8.1 HIGH
Network
beanshell
debian
canonical
beanshell
debian_linux
ubuntu_linux
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, … CWE-19
 Data Processing Errors
CVE-2016-2510 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266823 6.5 MEDIUM
Local
qemu
canonical
debian
qemu
ubuntu_linux
debian_linux
QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbit… CWE-331
 Insufficient Entropy
CVE-2016-2858 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266824 6.5 MEDIUM
Network
schneider-electric proface_gp-pro_ex_pfxexedls
proface_gp-pro_ex_pfxexedv
proface_gp-pro_ex_ex-ed
proface_gp-pro_ex_pfxexgrpls
Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitra… CWE-787
 Out-of-bounds Write
CVE-2016-2292 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
266825 6.5 MEDIUM
Network
schneider-electric proface_gp-pro_ex_pfxexedls
proface_gp-pro_ex_pfxexedv
proface_gp-pro_ex_ex-ed
proface_gp-pro_ex_pfxexgrpls
Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of ser… CWE-125
Out-of-bounds Read
CVE-2016-2291 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
266826 8.8 HIGH
Network
schneider-electric proface_gp-pro_ex_pfxexedls
proface_gp-pro_ex_pfxexedv
proface_gp-pro_ex_ex-ed
proface_gp-pro_ex_pfxexgrpls
Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrar… CWE-787
 Out-of-bounds Write
CVE-2016-2290 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
266827 6.3 MEDIUM
Local
rockwellautomation integrated_architecture_builder IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file. CWE-284
Improper Access Control
CVE-2016-2277 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
266828 7.5 HIGH
Network
eaton_lighting_systems eg2_web_control Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie. CWE-284
Improper Access Control
CVE-2016-2272 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
266829 9.8 CRITICAL
Network
patterson_dental eaglesoft Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements. NVD-CWE-Other
CVE-2016-2343 2024-11-21 11:48 2016-04-2 Show GitHub Exploit DB Packet Storm
266830 7.5 HIGH
Network
iconics webhmi Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently discover password hashes, via unspecified vectors. CWE-22
Path Traversal
CVE-2016-2289 2024-11-21 11:48 2016-04-2 Show GitHub Exploit DB Packet Storm