Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251011 2.6 注意 MediaWiki - MediaWiki の profileinfo.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2788 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251012 4.3 警告 MediaWiki - MediaWiki の api.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2787 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251013 9 危険 シスコシステムズ - Cisco WLC におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2843 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251014 9 危険 シスコシステムズ - Cisco WLC におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2842 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251015 6.8 警告 シスコシステムズ - Cisco WLC におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2841 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251016 3.5 注意 MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2802 2012-03-27 18:42 2010-05-23 Show GitHub Exploit DB Packet Storm
251017 6.8 警告 dest-unreach.org - Socat の nestlex 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2799 2012-03-27 18:42 2010-09-14 Show GitHub Exploit DB Packet Storm
251018 7.5 危険 CMS Made Simple - CMS Made Simple の lib/translation.functions.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2797 2012-03-27 18:42 2010-07-13 Show GitHub Exploit DB Packet Storm
251019 6.8 警告 マイクロソフト
レッドハット		 - RHEV Manager の SPICE plug-in for Internet Explorer における競合状態の脆弱性 CWE-362
競合状態 		CVE-2010-2793 2012-03-27 18:42 2010-12-6 Show GitHub Exploit DB Packet Storm
251020 4.3 警告 Novell - Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2779 2012-03-27 18:42 2010-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268391 2.4 LOW
Physics 		apple iphone_os Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via… CWE-200
Information Exposure 		CVE-2016-1852 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268392 4.6 MEDIUM
Physics 		apple mac_os_x The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vect… NVD-CWE-noinfo
CVE-2016-1851 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268393 7.8 HIGH
Local 		apple mac_os_x SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1850 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268394 3.3 LOW
Local 		apple safari
iphone_os 		The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the deletion of browsing history, which might allow local users t… CWE-200
Information Exposure 		CVE-2016-1849 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268395 7.8 HIGH
Local 		apple mac_os_x QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1848 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268396 8.8 HIGH
Network 		apple iphone_os
mac_os_x
tvos
watchos 		OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1847 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268397 7.8 HIGH
Local 		apple mac_os_x The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1846 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268398 5.3 MEDIUM
Network 		apple mac_os_x The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-1844 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268399 7.5 HIGH
Network 		apple mac_os_x The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2016-1843 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm
268400 7.5 HIGH
Network 		apple iphone_os
mac_os_x
watchos 		MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the netw… CWE-284
Improper Access Control 		CVE-2016-1842 2024-11-21 11:47 2016-05-20 Show GitHub Exploit DB Packet Storm