Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251311 4 警告 VMware - VMware vCenter Orchestrator の Web Configuration tool における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1513 2012-03-21 16:34 2012-03-15 Show GitHub Exploit DB Packet Storm
251312 4.3 警告 VMware - VMware vSphere の vSphere Client にある内部ブラウザにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1512 2012-03-21 16:33 2012-03-15 Show GitHub Exploit DB Packet Storm
251313 4.3 警告 VMware - VMware View の View Manager Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1511 2012-03-21 16:31 2012-03-15 Show GitHub Exploit DB Packet Storm
251314 7.2 危険 VMware - 複数の VMware 製品の WDDM ディスプレイドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1510 2012-03-21 16:30 2012-03-15 Show GitHub Exploit DB Packet Storm
251315 7.2 危険 VMware - VMware View の XPDM ディスプレイドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1509 2012-03-21 16:29 2012-03-15 Show GitHub Exploit DB Packet Storm
251316 7.2 危険 VMware - 複数の VMware 製品の XPDM ディスプレイドライバにおけるゲスト OS の 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1508 2012-03-21 16:28 2012-03-15 Show GitHub Exploit DB Packet Storm
251317 7.5 危険 アップル
Google
- 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-3909 2012-03-21 16:23 2011-12-13 Show GitHub Exploit DB Packet Storm
251318 5 警告 アップル
Google
- 複数の製品で使用される Webkit におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー
CVE-2011-3908 2012-03-21 16:22 2011-12-13 Show GitHub Exploit DB Packet Storm
251319 6.8 警告 アップル
Google
- 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3897 2012-03-21 16:21 2011-11-10 Show GitHub Exploit DB Packet Storm
251320 6.8 警告 アップル
Google
- 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3888 2012-03-21 16:20 2011-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266331 5.5 MEDIUM
Local
linux
redhat
linux_kernel
enterprise_linux
The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disab… CWE-74
Injection
CVE-2016-3695 2024-11-21 11:50 2017-12-30 Show GitHub Exploit DB Packet Storm
266332 7.5 HIGH
Network
fedoraproject
pulpproject
fedora
pulp
Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords. CWE-255
Credentials Management
CVE-2016-3704 2024-11-21 11:50 2017-06-14 Show GitHub Exploit DB Packet Storm
266333 5.5 MEDIUM
Local
fedoraproject
pulpproject
fedora
pulp
The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key. CWE-200
Information Exposure
CVE-2016-3696 2024-11-21 11:50 2017-06-14 Show GitHub Exploit DB Packet Storm
266334 9.8 CRITICAL
Network
redhat jboss_enterprise_application_platform The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload. CWE-502
 Deserialization of Untrusted Data
CVE-2016-3690 2024-11-21 11:50 2017-06-9 Show GitHub Exploit DB Packet Storm
266335 8.8 HIGH
Network
kallithea-scm kallithea Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method. CWE-352
 Origin Validation Error
CVE-2016-3691 2024-11-21 11:50 2017-04-25 Show GitHub Exploit DB Packet Storm
266336 5.3 MEDIUM
Network
redhat cloudforms_management_engine Padding oracle flaw in CloudForms Management Engine (aka CFME) 5 allows remote attackers to obtain sensitive cleartext information. CWE-200
Information Exposure
CVE-2016-3702 2024-11-21 11:50 2017-04-22 Show GitHub Exploit DB Packet Storm
266337 8.8 HIGH
Network
moodle moodle Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack t… CWE-352
 Origin Validation Error
CVE-2016-3734 2024-11-21 11:50 2017-04-21 Show GitHub Exploit DB Packet Storm
266338 4.3 MEDIUM
Network
moodle moodle The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber. CWE-284
Improper Access Control
CVE-2016-3733 2024-11-21 11:50 2017-04-21 Show GitHub Exploit DB Packet Storm
266339 4.3 MEDIUM
Network
moodle moodle The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of… CWE-200
Information Exposure
CVE-2016-3732 2024-11-21 11:50 2017-04-21 Show GitHub Exploit DB Packet Storm
266340 5.3 MEDIUM
Network
moodle moodle Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions. CWE-200
Information Exposure
CVE-2016-3731 2024-11-21 11:50 2017-04-21 Show GitHub Exploit DB Packet Storm