Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251291 2.1 注意 フレクセラ・ソフトウェア合同会社 - Flexera Macrovision InstallShield における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-6744 2012-01-24 15:32 2007-05-23 Show GitHub Exploit DB Packet Storm
251292 9 危険 シスコシステムズ - Cisco Digital Media Manager における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0329 2012-01-24 15:22 2012-01-18 Show GitHub Exploit DB Packet Storm
251293 5.1 警告 Yahoo! - Yahoo! Messenger の YImage.dll の CYImage::LoadJPG メソッドにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-0268 2012-01-24 15:13 2012-01-19 Show GitHub Exploit DB Packet Storm
251294 5 警告 Certec EDV - Certec EDV atvise におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2011-4873 2012-01-24 15:11 2012-01-19 Show GitHub Exploit DB Packet Storm
251295 10 危険 シスコシステムズ - Cisco TelePresence Software における設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4659 2012-01-24 15:09 2012-01-18 Show GitHub Exploit DB Packet Storm
251296 9.3 危険 IBM - IBM SPSS Dimensions および SPSS Data Collection における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-0188 2012-01-23 17:54 2012-01-18 Show GitHub Exploit DB Packet Storm
251297 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の Windows Object Packager 設定における権限昇格の脆弱性 CWE-Other
その他
CVE-2012-0009 2012-01-23 17:52 2012-01-10 Show GitHub Exploit DB Packet Storm
251298 9.3 危険 IBM - IBM SPSS SamplePower の VsVIEW6.ocx における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-0189 2012-01-23 16:33 2012-01-18 Show GitHub Exploit DB Packet Storm
251299 9.3 危険 IBM - IBM SPSS Dimensions および SPSS Data Collection における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-0190 2012-01-23 16:33 2012-01-18 Show GitHub Exploit DB Packet Storm
251300 5 警告 The PHP Group - PHP の tidy_diagnose 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0781 2012-01-23 16:32 2012-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269171 7.2 HIGH
Network
piwigo piwigo admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter. CWE-284
Improper Access Control
CVE-2016-10085 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
269172 7.2 HIGH
Network
piwigo piwigo admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] variable (aka the mode parameter). CWE-284
Improper Access Control
CVE-2016-10084 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
269173 6.1 MEDIUM
Network
piwigo piwigo Cross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in a cert… CWE-79
Cross-site Scripting
CVE-2016-10083 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
269174 9.8 CRITICAL
Network
s9y serendipity include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack during a first-time installation because it fails to sanitize the… CWE-284
Improper Access Control
CVE-2016-10082 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
269175 7.8 HIGH
Local
shutter-project shutter /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action. CWE-19
 Data Processing Errors
CVE-2016-10081 2024-11-21 11:43 2016-12-30 Show GitHub Exploit DB Packet Storm
269176 7.5 HIGH
Local
wampserver wampserver WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary co… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10072 2024-11-21 11:43 2016-12-27 Show GitHub Exploit DB Packet Storm
269177 7.5 HIGH
Local
wampserver wampserver WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged l… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10031 2024-11-21 11:43 2016-12-27 Show GitHub Exploit DB Packet Storm
269178 6.1 MEDIUM
Network
antisamy_project antisamy In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impac… CWE-79
Cross-site Scripting
CVE-2016-10006 2024-11-21 11:43 2016-12-25 Show GitHub Exploit DB Packet Storm
269179 7.5 HIGH
Network
sprecher-automation sprecon-e_service_program An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10041 2024-11-21 11:43 2016-12-25 Show GitHub Exploit DB Packet Storm
269180 7.3 HIGH
Network
modx modx_revolution Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to … CWE-22
Path Traversal
CVE-2016-10039 2024-11-21 11:43 2016-12-24 Show GitHub Exploit DB Packet Storm