Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241291	6.2	警告	Comodo	-	Windows XP 上で稼働する Comodo Internet Security におけるカーネルモードのフックハンドラを回避される脆弱性	CWE-362 競合状態	CVE-2010-5157	2012-09-5 11:39	2010-06-2	Show	GitHub Exploit DB Packet Storm

241292	4.3	警告	Fusion Drupal Themes	-	Drupal 用 Fusion モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2083	2012-09-5 11:37	2012-03-28	Show	GitHub Exploit DB Packet Storm

241293	5.8	警告	EGroupware	-	EGroupware Enterprise Line および EGroupware Community Edition におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2011-4951	2012-09-5 11:37	2011-08-4	Show	GitHub Exploit DB Packet Storm

241294	4.3	警告	EGroupware	-	EGroupware Enterprise Line および EGroupware Community Edition におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4950	2012-09-5 11:35	2011-08-4	Show	GitHub Exploit DB Packet Storm

241295	7.5	危険	EGroupware	-	EGroupware Enterprise Line および EGroupware Community Edition における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4949	2012-09-5 11:34	2011-08-4	Show	GitHub Exploit DB Packet Storm

241296	5	警告	EGroupware	-	EGroupware Enterprise Line および EGroupware Community Edition におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4948	2012-09-5 11:34	2011-08-4	Show	GitHub Exploit DB Packet Storm

241297	6.8	警告	e107.org	-	e107 の e107_admin/users_extended.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4947	2012-09-5 11:33	2011-05-28	Show	GitHub Exploit DB Packet Storm

241298	6.8	警告	e107.org	-	e107 の e107_admin/users_extended.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4946	2012-09-5 11:26	2011-05-28	Show	GitHub Exploit DB Packet Storm

241299	4.3	警告	SpamTitan Technologies	-	SpamTitan におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5150	2012-09-5 11:25	2012-08-31	Show	GitHub Exploit DB Packet Storm

241300	4.3	警告	SpamTitan Technologies	-	SpamTitan におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5149	2012-09-5 11:25	2012-08-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269241	9.8	CRITICAL Network	hp	vertica	The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary …	CWE-77 Command Injection	CVE-2016-2002	2024-11-21 11:47	2016-04-21	Show	GitHub Exploit DB Packet Storm

269242	7.5	HIGH Network	fedoraproject uninett	fedora mod_auth_mellon	The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service (worker process crash, web server de…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2146	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

269243	7.5	HIGH Network	fedoraproject uninett	fedora mod_auth_mellon	The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmen…	CWE-20 Improper Input Validation	CVE-2016-2145	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

269244	7.6	HIGH Network	vmware	vcenter_server vcloud_director vcloud_automation_identity_appliance	Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles ses…	CWE-287 Improper Authentication	CVE-2016-2076	2024-11-21 11:47	2016-04-15	Show	GitHub Exploit DB Packet Storm

269245	6.1	MEDIUM Network	redhat	satellite	Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/…	CWE-79 Cross-site Scripting	CVE-2016-2103	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

269246	5.4	MEDIUM Network	debian xymon	debian_linux xymon	Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is…	CWE-79 Cross-site Scripting	CVE-2016-2058	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

269247	3.3	LOW Local	xymon debian	xymon debian_linux	lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to th…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2057	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

269248	8.8	HIGH Network	xymon debian	xymon debian_linux	xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) …	CWE-77 Command Injection	CVE-2016-2056	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

269249	7.5	HIGH Network	xymon debian	xymon debian_linux	xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command.	CWE-200 Information Exposure	CVE-2016-2055	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm

269250	9.8	CRITICAL Network	debian xymon	debian_linux xymon	Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2054	2024-11-21 11:47	2016-04-14	Show	GitHub Exploit DB Packet Storm