Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241431 7.5 危険 OpenEMR - OpenEMR の interface/login/validateUser.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2115 2012-09-12 10:05 2012-09-9 Show GitHub Exploit DB Packet Storm
241432 6.8 警告 OpenEMR - OpenEMR における任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5161 2012-09-12 10:03 2012-09-9 Show GitHub Exploit DB Packet Storm
241433 4.3 警告 OpenEMR - OpenEMR の setup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5160 2012-09-12 10:02 2012-09-9 Show GitHub Exploit DB Packet Storm
241434 4.3 警告 Geeklog - Geeklog の admin/configuration.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5159 2012-09-12 10:00 2011-01-2 Show GitHub Exploit DB Packet Storm
241435 4.3 警告 Geeklog - Geeklog の admin/configuration.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4942 2012-09-12 09:58 2011-01-2 Show GitHub Exploit DB Packet Storm
241436 6.9 警告 RealFlex Technologies - 複数の RealFlex 製品における権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-3004 2012-09-12 09:38 2012-09-8 Show GitHub Exploit DB Packet Storm
241437 6.9 警告 VMware - 複数の VMware 製品の VMware Tools における権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-1666 2012-09-12 09:37 2012-09-8 Show GitHub Exploit DB Packet Storm
241438 7.5 危険 Ipswitch, Inc. - Ipswitch WhatsUp Gold の WrVMwareHostList.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2601 2012-09-11 17:27 2012-08-15 Show GitHub Exploit DB Packet Storm
241439 6.9 警告 DATEV - DATEV Grundpaket Basis における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-5158 2012-09-11 15:39 2012-09-7 Show GitHub Exploit DB Packet Storm
241440 6.9 警告 PKWARE - PKZIP における権限を取得される脆弱性 CWE-Other
その他 		CVE-2010-5274 2012-09-11 15:38 2012-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266061 4.3 MEDIUM
Network 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data. CWE-200
Information Exposure 		CVE-2016-6094 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266062 6.2 MEDIUM
Local 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user. CWE-200
Information Exposure 		CVE-2016-6092 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266063 9.8 CRITICAL
Network 		gradle gradle ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object. CWE-502
 Deserialization of Untrusted Data 		CVE-2016-6199 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266064 9.8 CRITICAL
Network 		php-gettext_project php-gettext Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header. CWE-94
Code Injection 		CVE-2016-6175 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266065 7.5 HIGH
Network 		gnu libiberty The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types. CWE-20
 Improper Input Validation  		CVE-2016-6131 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266066 6.5 MEDIUM
Network 		alinto sogo Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files. CWE-399
 Resource Management Errors 		CVE-2016-6188 2024-11-21 11:55 2017-02-4 Show GitHub Exploit DB Packet Storm
266067 5.5 MEDIUM
Local 		gnome librsvg The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file. CWE-125
Out-of-bounds Read 		CVE-2016-6163 2024-11-21 11:55 2017-02-4 Show GitHub Exploit DB Packet Storm
266068 5.9 MEDIUM
Network 		ibm security_key_lifecycle_manager IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could … CWE-200
Information Exposure 		CVE-2016-6116 2024-11-21 11:55 2017-02-3 Show GitHub Exploit DB Packet Storm
266069 8.8 HIGH
Network 		ibm security_key_lifecycle_manager IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the w… CWE-352
 Origin Validation Error 		CVE-2016-6103 2024-11-21 11:55 2017-02-3 Show GitHub Exploit DB Packet Storm
266070 5.3 MEDIUM
Network 		ibm security_key_lifecycle_manager IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. CWE-200
Information Exposure 		CVE-2016-6099 2024-11-21 11:55 2017-02-3 Show GitHub Exploit DB Packet Storm