Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251331 5 警告 LANDesk - Lenovo ThinkManagement Console におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1196 2012-02-21 16:44 2012-02-18 Show GitHub Exploit DB Packet Storm
251332 7.5 危険 LANDesk - Lenovo ThinkManagement Console の ServerSetup web サービスにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1195 2012-02-21 16:43 2012-02-18 Show GitHub Exploit DB Packet Storm
251333 4.3 警告 Craig Barratt - BackupPC の RestoreFile.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5081 2012-02-21 16:42 2012-02-18 Show GitHub Exploit DB Packet Storm
251334 4.3 警告 Craig Barratt - BackupPC の View.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4923 2012-02-21 16:41 2012-02-18 Show GitHub Exploit DB Packet Storm
251335 9.3 危険 TYPO3 Association - TYPO3 の workspaces system エクステンションにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2011-4614 2012-02-21 16:40 2011-12-16 Show GitHub Exploit DB Packet Storm
251336 4.3 警告 Craig Barratt - BackupPC の CGI/Browse.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3361 2012-02-21 16:34 2012-02-18 Show GitHub Exploit DB Packet Storm
251337 7.5 危険 Earl Miles - Drupal 用 Views モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4113 2012-02-21 16:33 2012-02-17 Show GitHub Exploit DB Packet Storm
251338 2.1 注意 Robert Ancell - LightDM における任意のファイルの所有権を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4105 2012-02-21 16:26 2012-02-17 Show GitHub Exploit DB Packet Storm
251339 6.4 警告 マイクロソフト - Microsoft Windows Server 2008 における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-Other
その他
CVE-2012-1194 2012-02-21 16:25 2012-02-17 Show GitHub Exploit DB Packet Storm
251340 6.4 警告 PowerDNS - PowerDNS における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1193 2012-02-21 16:24 2012-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266481 7.2 HIGH
Network
paloaltonetworks pan-os The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote au… CWE-20
 Improper Input Validation 
CVE-2016-3654 2024-11-21 11:50 2016-04-13 Show GitHub Exploit DB Packet Storm
266482 7.5 HIGH
Network
huawei s5300_firmware
s5700_firmware
s7700_firmware
s9300_firmware
s9700_firmware
Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic. CWE-20
 Improper Input Validation 
CVE-2016-3678 2024-11-21 11:50 2016-04-12 Show GitHub Exploit DB Packet Storm
266483 6.4 MEDIUM
Adjacent
huawei e3276s_firmware Huawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in-the-middle attackers to intercept, spoof, or modify network traffic via unspecified vectors related to… CWE-254
 7PK - Security Features
CVE-2016-3676 2024-11-21 11:50 2016-04-12 Show GitHub Exploit DB Packet Storm
266484 8.1 HIGH
Network
huawei policy_center_firmware SQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to syste… CWE-89
SQL Injection
CVE-2016-3675 2024-11-21 11:50 2016-04-12 Show GitHub Exploit DB Packet Storm
266485 8.8 HIGH
Network
cacti cacti SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter. CWE-89
SQL Injection
CVE-2016-3659 2024-11-21 11:50 2016-04-12 Show GitHub Exploit DB Packet Storm
266486 8.8 HIGH
Network
google
canonical
opensuse
v8
ubuntu_linux
opensuse
chrome
Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unkn… NVD-CWE-noinfo
CVE-2016-3679 2024-11-21 11:50 2016-03-29 Show GitHub Exploit DB Packet Storm
266487 5.4 MEDIUM
Network
thoughtbot administrate Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code. CWE-352
 Origin Validation Error
CVE-2016-3098 2024-11-21 11:49 2022-08-6 Show GitHub Exploit DB Packet Storm
266488 5.5 MEDIUM
Local
uclouvain openjpeg The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3182 2024-11-21 11:49 2020-02-20 Show GitHub Exploit DB Packet Storm
266489 6.5 MEDIUM
Network
cloudera cloudera_manager Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2016-3192 2024-11-21 11:49 2019-11-26 Show GitHub Exploit DB Packet Storm
266490 6.5 MEDIUM
Network
cloudera cdh Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls. CWE-863
 Incorrect Authorization
CVE-2016-3131 2024-11-21 11:49 2019-11-26 Show GitHub Exploit DB Packet Storm