Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241301 6.8 警告 Wasen - Joomla! 用 Simple File Upload モジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5148 2012-09-5 11:23 2012-01-2 Show GitHub Exploit DB Packet Storm
241302 5 警告 FreeWebshop - FreeWebshop の tinymce プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-5147 2012-09-5 11:19 2012-08-31 Show GitHub Exploit DB Packet Storm
241303 2.6 注意 Inguma - Debian 用 Bokken における任意のファイルを上書される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-5146 2012-09-5 11:17 2012-01-24 Show GitHub Exploit DB Packet Storm
241304 5.5 警告 OBM - Open Business Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5145 2012-09-5 11:15 2012-08-31 Show GitHub Exploit DB Packet Storm
241305 5 警告 OBM - Open Business Management における設定情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5144 2012-09-5 11:13 2012-08-31 Show GitHub Exploit DB Packet Storm
241306 4.3 警告 OBM - Open Business Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5143 2012-09-5 11:11 2012-08-31 Show GitHub Exploit DB Packet Storm
241307 4.3 警告 OBM - Open Business Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5142 2012-09-5 11:10 2012-08-31 Show GitHub Exploit DB Packet Storm
241308 6 警告 OBM - Open Business Management の exportcsv/exportcsv_index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5141 2012-09-5 11:09 2012-08-31 Show GitHub Exploit DB Packet Storm
241309 7.5 危険 diy-cms - DiY-CMS 用 blog モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5140 2012-09-5 11:05 2012-08-31 Show GitHub Exploit DB Packet Storm
241310 7.5 危険 PreProject.com - Pre Studio Business Cards Designer の page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5139 2012-09-5 11:00 2012-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269241 9.8 CRITICAL
Network 		hp vertica The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary … CWE-77
Command Injection 		CVE-2016-2002 2024-11-21 11:47 2016-04-21 Show GitHub Exploit DB Packet Storm
269242 7.5 HIGH
Network 		fedoraproject
uninett 		fedora
mod_auth_mellon 		The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service (worker process crash, web server de… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2146 2024-11-21 11:47 2016-04-15 Show GitHub Exploit DB Packet Storm
269243 7.5 HIGH
Network 		fedoraproject
uninett 		fedora
mod_auth_mellon 		The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmen… CWE-20
 Improper Input Validation  		CVE-2016-2145 2024-11-21 11:47 2016-04-15 Show GitHub Exploit DB Packet Storm
269244 7.6 HIGH
Network 		vmware vcenter_server
vcloud_director
vcloud_automation_identity_appliance 		Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles ses… CWE-287
Improper Authentication 		CVE-2016-2076 2024-11-21 11:47 2016-04-15 Show GitHub Exploit DB Packet Storm
269245 6.1 MEDIUM
Network 		redhat satellite Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/… CWE-79
Cross-site Scripting 		CVE-2016-2103 2024-11-21 11:47 2016-04-14 Show GitHub Exploit DB Packet Storm
269246 5.4 MEDIUM
Network 		debian
xymon 		debian_linux
xymon 		Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is… CWE-79
Cross-site Scripting 		CVE-2016-2058 2024-11-21 11:47 2016-04-14 Show GitHub Exploit DB Packet Storm
269247 3.3 LOW
Local 		xymon
debian 		xymon
debian_linux 		lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to th… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2057 2024-11-21 11:47 2016-04-14 Show GitHub Exploit DB Packet Storm
269248 8.8 HIGH
Network 		xymon
debian 		xymon
debian_linux 		xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) … CWE-77
Command Injection 		CVE-2016-2056 2024-11-21 11:47 2016-04-14 Show GitHub Exploit DB Packet Storm
269249 7.5 HIGH
Network 		xymon
debian 		xymon
debian_linux 		xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command. CWE-200
Information Exposure 		CVE-2016-2055 2024-11-21 11:47 2016-04-14 Show GitHub Exploit DB Packet Storm
269250 9.8 CRITICAL
Network 		debian
xymon 		debian_linux
xymon 		Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2054 2024-11-21 11:47 2016-04-14 Show GitHub Exploit DB Packet Storm