Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251181	5	警告	OTRS プロジェクト	-	OTRS の S/MIME 機能における電子メールメッセージを解読される脆弱性	CWE-20 不適切な入力確認	CVE-2008-7278	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

251182	6.5	警告	OTRS プロジェクト	-	OTRS におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7277	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

251183	4.6	警告	OTRS プロジェクト	-	OTRS の Kernel/System/Web/Request.pm におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7276	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

251184	4.3	警告	OTRS プロジェクト	-	OTRS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7275	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

251185	5.8	警告	boka	-	SiteEngine の api.php におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2008-7269	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251186	4	警告	IBM	-	IBM TDS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2007-6743	2012-03-27 18:42	2011-04-10	Show	GitHub Exploit DB Packet Storm

251187	6.8	警告	IBM	-	IBM TDS の get_filter_list 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2007-6742	2012-03-27 18:42	2011-04-10	Show	GitHub Exploit DB Packet Storm

251188	4.3	警告	monkeysaudio	-	Monkey's Audio におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2006-7245	2012-03-27 18:42	2011-05-20	Show	GitHub Exploit DB Packet Storm

251189	5	警告	PNG Development Group	-	libpng の pngwutil.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2006-7244	2012-03-27 18:42	2011-08-31	Show	GitHub Exploit DB Packet Storm

251190	5	警告	boka	-	SiteEngine の phpinfo 関数におけるシステム情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-7268	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266331	7.3	HIGH Network	rockwellautomation	factorytalk_energrymetrix	Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattend…	CWE-285 Improper Authorization	CVE-2016-4531	2024-11-21 11:52	2016-07-28	Show	GitHub Exploit DB Packet Storm

266332	9.8	CRITICAL Network	rockwellautomation	factorytalk_energrymetrix	SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2016-4522	2024-11-21 11:52	2016-07-28	Show	GitHub Exploit DB Packet Storm

266333	7.8	HIGH Local	apple	iphone_os tvos mac_os_x watchos	The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4653	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

266334	6.3	MEDIUM Local	apple	mac_os_x	CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service (out-of-bounds read), vi…	CWE-264 CWE-125 Permissions, Privileges, and Access Controls Out-of-bounds Read	CVE-2016-4652	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

266335	6.1	MEDIUM Network	apple	iphone_os safari	Cross-site scripting (XSS) vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a craft…	CWE-79 Cross-site Scripting	CVE-2016-4651	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

266336	5.5	MEDIUM Local	apple	mac_os_x	Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.	CWE-476 NULL Pointer Dereference	CVE-2016-4649	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

266337	5.5	MEDIUM Local	apple	mac_os_x	Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-4648	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

266338	7.8	HIGH Local	apple	mac_os_x	Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4647	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

266339	6.5	MEDIUM Network	apple	mac_os_x	Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted audio file.	CWE-200 Information Exposure	CVE-2016-4646	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

266340	3.3	LOW Local	apple	mac_os_x	CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, which allows local users to obtain sensitive information via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-4645	2024-11-21 11:52	2016-07-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed