Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251041 7.8 危険 アップル
サイバートラスト株式会社
PNG Development Group
Lunascape
オラクル
VMware
フェンリル株式会社
レッドハット
- libpng における圧縮された補助チャンクの処理に脆弱性 CWE-399
リソース管理の問題
CVE-2010-0205 2012-03-27 10:22 2010-03-4 Show GitHub Exploit DB Packet Storm
251042 7.5 危険 クアンタム
デル
IBM
- 複数のテープライブラリ製品におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-1844 2012-03-26 18:12 2012-03-22 Show GitHub Exploit DB Packet Storm
251043 5 警告 クアンタム
デル
- Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1841 2012-03-26 18:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251044 5 警告 LG-Nortel - LG-Nortel ELO GS24M に複数の脆弱性 CWE-287
不適切な認証
CVE-2012-1838 2012-03-26 16:29 2012-03-22 Show GitHub Exploit DB Packet Storm
251045 7.5 危険 Webglimpse - WebGlimpse に OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-1795 2012-03-26 16:24 2012-03-20 Show GitHub Exploit DB Packet Storm
251046 7.5 危険 Pydio - AjaXplorer におけるログインのアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2012-1840 2012-03-26 16:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251047 7.5 危険 Pydio - AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1839 2012-03-26 16:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251048 5 警告 IBM - IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1837 2012-03-26 16:07 2012-03-22 Show GitHub Exploit DB Packet Storm
251049 4.3 警告 IBM - IBM Tivoli Endpoint Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0719 2012-03-26 16:04 2012-03-22 Show GitHub Exploit DB Packet Storm
251050 4.3 警告 ESET
K7 Computing
AVG Technologies
トレンドマイクロ
Ikarus
Norman
ソフォス
マカフィー
Beijing Rising International Software
BitDefender
VirusBlokAda
フォーティネット
カスペルスキー
Emsisoft
Authentium
シマンテック
エフ・セキュア
Jiangmin
- 複数の製品の Gzip ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1461 2012-03-26 14:35 2012-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268641 7.5 HIGH
Network
google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. There is a SIM Lock bypass. The Samsung ID is SVE-2016-5381 (June 2016). CWE-287
Improper Authentication
CVE-2016-11042 2024-11-21 11:45 2020-04-7 Show GitHub Exploit DB Packet Storm
268642 4.6 MEDIUM
Physics
google android An issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the lockscreen by sending an AT command over USB. The Samsung ID is SVE-2015-5301 (June 2016). CWE-287
Improper Authentication
CVE-2016-11041 2024-11-21 11:45 2020-04-7 Show GitHub Exploit DB Packet Storm
268643 9.8 CRITICAL
Network
odata4j_project odata4j odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued. CWE-89
SQL Injection
CVE-2016-11024 2024-11-21 11:45 2020-03-31 Show GitHub Exploit DB Packet Storm
268644 9.8 CRITICAL
Network
odata4j_project odata4j odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued. CWE-89
SQL Injection
CVE-2016-11023 2024-11-21 11:45 2020-03-31 Show GitHub Exploit DB Packet Storm
268645 7.2 HIGH
Network
netgear prosafe_wc9500_firmware
prosafe_wc7600_firmware
prosafe_wc7520_firmware
NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login… CWE-78
OS Command 
CVE-2016-11022 2024-11-21 11:45 2020-03-24 Show GitHub Exploit DB Packet Storm
268646 6.5 MEDIUM
Network
zohocorp manageengine_password_manager_pro In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service. CWE-200
Information Exposure
CVE-2016-1159 2024-11-21 11:45 2020-03-10 Show GitHub Exploit DB Packet Storm
268647 7.2 HIGH
Network
dlink dcs-930l_firmware setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter. CWE-78
OS Command 
CVE-2016-11021 2024-11-21 11:45 2020-03-9 Show GitHub Exploit DB Packet Storm
268648 9.8 CRITICAL
Network
kunena kunena Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2016-11020 2024-11-21 11:45 2020-02-26 Show GitHub Exploit DB Packet Storm
268649 9.8 CRITICAL
Network
huge-it image_gallery An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gal… CWE-89
SQL Injection
CVE-2016-11018 2024-11-21 11:45 2020-01-22 Show GitHub Exploit DB Packet Storm
268650 9.8 CRITICAL
Network
akips network_monitor The application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote unauthenticated attacker to execute arbitrary OS commands via shell metacharacters in the username parameter (a … CWE-78
OS Command 
CVE-2016-11017 2024-11-21 11:45 2020-01-7 Show GitHub Exploit DB Packet Storm