Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241901	4.3	警告	Geeklog	-	Geeklog の admin/configuration.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5159	2012-09-12 10:00	2011-01-2	Show	GitHub Exploit DB Packet Storm

241902	4.3	警告	Geeklog	-	Geeklog の admin/configuration.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4942	2012-09-12 09:58	2011-01-2	Show	GitHub Exploit DB Packet Storm

241903	6.9	警告	RealFlex Technologies	-	複数の RealFlex 製品における権限を取得される脆弱性	CWE-Other その他	CVE-2012-3004	2012-09-12 09:38	2012-09-8	Show	GitHub Exploit DB Packet Storm

241904	6.9	警告	VMware	-	複数の VMware 製品の VMware Tools における権限を取得される脆弱性	CWE-Other その他	CVE-2012-1666	2012-09-12 09:37	2012-09-8	Show	GitHub Exploit DB Packet Storm

241905	7.5	危険	Ipswitch, Inc.	-	Ipswitch WhatsUp Gold の WrVMwareHostList.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2601	2012-09-11 17:27	2012-08-15	Show	GitHub Exploit DB Packet Storm

241906	6.9	警告	DATEV	-	DATEV Grundpaket Basis における権限を取得される脆弱性	CWE-Other その他	CVE-2011-5158	2012-09-11 15:39	2012-09-7	Show	GitHub Exploit DB Packet Storm

241907	6.9	警告	PKWARE	-	PKZIP における権限を取得される脆弱性	CWE-Other その他	CVE-2010-5274	2012-09-11 15:38	2012-09-7	Show	GitHub Exploit DB Packet Storm

241908	6.9	警告	Altova	-	Altova DiffDog における権限を取得される脆弱性	CWE-Other その他	CVE-2010-5273	2012-09-11 15:38	2012-09-7	Show	GitHub Exploit DB Packet Storm

241909	6.9	警告	Altova	-	Altova DatabaseSpy における権限を取得される脆弱性	CWE-Other その他	CVE-2010-5272	2012-09-11 15:37	2012-09-7	Show	GitHub Exploit DB Packet Storm

241910	6.9	警告	Altova	-	Altova MapForce における権限を取得される脆弱性	CWE-Other その他	CVE-2010-5271	2012-09-11 15:37	2012-09-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265721	7.8	HIGH Local	xen citrix	xen xenserver	Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a gue…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9382	2024-11-21 12:01	2017-01-24	Show	GitHub Exploit DB Packet Storm

265722	7.5	HIGH Local	qemu citrix	qemu xenserver	Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.	CWE-362 Race Condition	CVE-2016-9381	2024-11-21 12:01	2017-01-24	Show	GitHub Exploit DB Packet Storm

265723	7.5	HIGH Local	xen citrix	xen xenserver	The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in…	CWE-20 Improper Input Validation	CVE-2016-9380	2024-11-21 12:01	2017-01-24	Show	GitHub Exploit DB Packet Storm

265724	7.9	HIGH Local	xen citrix	xen xenserver	The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes…	CWE-20 Improper Input Validation	CVE-2016-9379	2024-11-21 12:01	2017-01-24	Show	GitHub Exploit DB Packet Storm

265725	7.8	HIGH Local	broadcom ca	ca_workload_automation_ae client_automation systemedge systems_performance_for_infrastructure_managers universal_job_management_agent virtual_assurance_for_infrastructure_managers	The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Unive…	CWE-20 Improper Input Validation	CVE-2016-9795	2024-11-21 12:01	2017-01-28	Show	GitHub Exploit DB Packet Storm

265726	6.7	MEDIUM Local	emc	isilon_onefs	EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerabilit…	CWE-90 LDAP Injection	CVE-2016-9870	2024-11-21 12:01	2017-01-23	Show	GitHub Exploit DB Packet Storm

265727	6.5	MEDIUM Network	opensuse_project opensuse tats	leap w3m	parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.	CWE-20 Improper Input Validation	CVE-2016-9436	2024-11-21 12:01	2017-01-21	Show	GitHub Exploit DB Packet Storm

265728	6.5	MEDIUM Network	opensuse_project opensuse tats	leap w3m	The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd…	CWE-20 Improper Input Validation	CVE-2016-9435	2024-11-21 12:01	2017-01-21	Show	GitHub Exploit DB Packet Storm

265729	4.3	MEDIUM Network	google	chrome	Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a…	CWE-19 Data Processing Errors	CVE-2016-9650	2024-11-21 12:01	2017-01-19	Show	GitHub Exploit DB Packet Storm

265730	7.5	HIGH Network	citrix	provisioning_services	Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-9680	2024-11-21 12:01	2017-01-19	Show	GitHub Exploit DB Packet Storm