Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241631 5.8 警告 EGroupware - EGroupware Enterprise Line および EGroupware Community Edition におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2011-4951 2012-09-5 11:37 2011-08-4 Show GitHub Exploit DB Packet Storm
241632 4.3 警告 EGroupware - EGroupware Enterprise Line および EGroupware Community Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4950 2012-09-5 11:35 2011-08-4 Show GitHub Exploit DB Packet Storm
241633 7.5 危険 EGroupware - EGroupware Enterprise Line および EGroupware Community Edition における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4949 2012-09-5 11:34 2011-08-4 Show GitHub Exploit DB Packet Storm
241634 5 警告 EGroupware - EGroupware Enterprise Line および EGroupware Community Edition におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4948 2012-09-5 11:34 2011-08-4 Show GitHub Exploit DB Packet Storm
241635 6.8 警告 e107.org - e107 の e107_admin/users_extended.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-4947 2012-09-5 11:33 2011-05-28 Show GitHub Exploit DB Packet Storm
241636 6.8 警告 e107.org - e107 の e107_admin/users_extended.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4946 2012-09-5 11:26 2011-05-28 Show GitHub Exploit DB Packet Storm
241637 4.3 警告 SpamTitan Technologies - SpamTitan におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5150 2012-09-5 11:25 2012-08-31 Show GitHub Exploit DB Packet Storm
241638 4.3 警告 SpamTitan Technologies - SpamTitan におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5149 2012-09-5 11:25 2012-08-31 Show GitHub Exploit DB Packet Storm
241639 6.8 警告 Wasen - Joomla! 用 Simple File Upload モジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2011-5148 2012-09-5 11:23 2012-01-2 Show GitHub Exploit DB Packet Storm
241640 5 警告 FreeWebshop - FreeWebshop の tinymce プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-5147 2012-09-5 11:19 2012-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269461 3.8 LOW
Local
oracle
xen
fedoraproject
debian
vm_server
xen
fedora
debian_linux
The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensiti… CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2016-3159 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
269462 3.8 LOW
Local
xen
fedoraproject
oracle
xen
fedora
vm_server
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive … CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2016-3158 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
269463 8.8 HIGH
Network
mercurial
debian
suse
opensuse
fedoraproject
redhat
mercurial
debian_linux
linux_enterprise_software_development_kit
linux_enterprise_debuginfo
opensuse
leap
fedora
enterprise_linux_desktop
enterprise_linux_server_aus
enterp…
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository. CWE-20
 Improper Input Validation 
CVE-2016-3069 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
269464 8.8 HIGH
Network
debian
mercurial
fedoraproject
redhat
suse
opensuse
debian_linux
mercurial
fedora
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_li…
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository. CWE-20
 Improper Input Validation 
CVE-2016-3068 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
269465 8.8 HIGH
Network
cacti cacti SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parent_id parameter in an item_edit action. CWE-89
SQL Injection
CVE-2016-3172 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm
269466 7.8 HIGH
Local
xen
canonical
xen
ubuntu_linux
The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-3157 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm
269467 8.1 HIGH
Network
drupal
debian
drupal
debian_linux
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data trunc… CWE-19
 Data Processing Errors
CVE-2016-3171 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm
269468 5.3 MEDIUM
Network
debian
drupal
debian_linux
drupal
The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configur… CWE-200
Information Exposure
CVE-2016-3170 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm
269469 8.1 HIGH
Network
debian
drupal
debian_linux
drupal
The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit ca… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-3169 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm
269470 6.4 MEDIUM
Network
drupal
debian
drupal
debian_linux
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrar… CWE-254
 7PK - Security Features
CVE-2016-3168 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm