Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251231	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsSVGPathSegList::ReplaceItem 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0083	2012-01-27 16:22	2011-06-21	Show	GitHub Exploit DB Packet Storm

251232	4.3	警告	シマンテック	-	Symantec pcAnywhere 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3479	2012-01-27 16:20	2012-01-22	Show	GitHub Exploit DB Packet Storm

251233	10	危険	シマンテック	-	Symantec pcAnywhere 製品における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2011-3478	2012-01-27 16:18	2012-01-22	Show	GitHub Exploit DB Packet Storm

251234	4.3	警告	Digium	-	Asterisk Open Source の chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-0885	2012-01-27 15:44	2012-01-15	Show	GitHub Exploit DB Packet Storm

251235	4.3	警告	Google	-	Android の Bluetooth サービスにおける連絡先データを取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4276	2012-01-27 15:43	2011-10-28	Show	GitHub Exploit DB Packet Storm

251236	5.8	警告	Tencent	-	Android 用 Tencent QQPhoto における連絡先情報およびパスワードハッシュを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4867	2012-01-27 15:18	2012-01-25	Show	GitHub Exploit DB Packet Storm

251237	6.4	警告	Kaixin001	-	Android 用 Kaixin001 における連絡先情報および平文パスワードを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-4866	2012-01-27 15:18	2012-01-25	Show	GitHub Exploit DB Packet Storm

251238	5.8	警告	Tencent	-	Android 用 Tencent WBlog および MicroBlogPad におけるドラフトメッセージおよび検索キーワードを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4865	2012-01-27 15:12	2012-01-25	Show	GitHub Exploit DB Packet Storm

251239	5.8	警告	Tencent	-	Android 用 Tencent MobileQQ におけるメッセージおよびフレンドリストを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4864	2012-01-27 15:10	2012-01-25	Show	GitHub Exploit DB Packet Storm

251240	5.8	警告	Tencent	-	Android 用 Tencent QQPimSecure における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4863	2012-01-27 15:08	2012-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269091	6.1	MEDIUM Network	antisamy_project	antisamy	In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impac…	CWE-79 Cross-site Scripting	CVE-2016-10006	2024-11-21 11:43	2016-12-25	Show	GitHub Exploit DB Packet Storm

269092	7.5	HIGH Network	sprecher-automation	sprecon-e_service_program	An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-10041	2024-11-21 11:43	2016-12-25	Show	GitHub Exploit DB Packet Storm

269093	7.3	HIGH Network	modx	modx_revolution	Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to …	CWE-22 Path Traversal	CVE-2016-10039	2024-11-21 11:43	2016-12-24	Show	GitHub Exploit DB Packet Storm

269094	7.3	HIGH Network	modx	modx_revolution	Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to …	CWE-22 Path Traversal	CVE-2016-10038	2024-11-21 11:43	2016-12-24	Show	GitHub Exploit DB Packet Storm

269095	7.3	HIGH Network	modx	modx_revolution	Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, re…	CWE-22 Path Traversal	CVE-2016-10037	2024-11-21 11:43	2016-12-24	Show	GitHub Exploit DB Packet Storm

269096	7.5	HIGH Network	sap	solution_manager	Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524.	CWE-200 Information Exposure	CVE-2016-10005	2024-11-21 11:43	2016-12-19	Show	GitHub Exploit DB Packet Storm

269097	7.5	HIGH Network	ruckus	wireless_h500	Ruckus Wireless H500 web management interface denial of service	NVD-CWE-noinfo	CVE-2016-1000215	2024-11-21 11:43	2016-10-25	Show	GitHub Exploit DB Packet Storm

269098	5.3	MEDIUM Network	ruckus	wireless_h500	Ruckus Wireless H500 web management interface authentication bypass	CWE-287 CWE-200 Improper Authentication Information Exposure	CVE-2016-1000214	2024-11-21 11:43	2016-10-25	Show	GitHub Exploit DB Packet Storm

269099	8.8	HIGH Network	ruckus	wireless_h500	Ruckus Wireless H500 web management interface authenticated command injection	CWE-78 OS Command	CVE-2016-1000216	2024-11-21 11:43	2016-10-11	Show	GitHub Exploit DB Packet Storm

269100	9.8	CRITICAL Network	zotpress_project	zotpress	Zotpress plugin for WordPress SQLi in zp_get_account()	CWE-89 SQL Injection	CVE-2016-1000217	2024-11-21 11:43	2016-10-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed