Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251491 4 警告 One Click Orgs - One Click Orgs におけるサービス運用妨害 (ログイン障害) の脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-4555 2011-12-12 18:18 2011-12-6 Show GitHub Exploit DB Packet Storm
251492 5.5 警告 One Click Orgs - One Click Orgs における巧妙に細工された SMTP トラフィックを誘発する脆弱性 CWE-20
不適切な入力確認
CVE-2011-4554 2011-12-12 18:15 2011-12-6 Show GitHub Exploit DB Packet Storm
251493 6.9 警告 Celery - Celery における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4356 2011-12-12 18:14 2011-12-5 Show GitHub Exploit DB Packet Storm
251494 7.5 危険 ヒューレット・パッカード - HP Protect Tools Device Access Manager における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-4162 2011-12-12 18:13 2011-12-1 Show GitHub Exploit DB Packet Storm
251495 10 危険 ヒューレット・パッカード - HP CM8060 Color MFP その他の製品のデフォルト設定における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4161 2011-12-12 18:10 2011-11-30 Show GitHub Exploit DB Packet Storm
251496 6.9 警告 マイクロソフト - Microsoft Windows 7 における Internet Explorer サンドボックスの制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2011-4695 2011-12-12 16:39 2011-12-7 Show GitHub Exploit DB Packet Storm
251497 9.3 危険 アップル
アドビシステムズ
マイクロソフト
- Windows および Mac OS X 上で稼働する Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4694 2011-12-12 16:38 2011-12-7 Show GitHub Exploit DB Packet Storm
251498 9.3 危険 アップル
アドビシステムズ
マイクロソフト
- Windows および Mac OS X 上で稼働する Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4693 2011-12-12 16:37 2011-12-7 Show GitHub Exploit DB Packet Storm
251499 5 警告 アップル
Google
- WebKit におけるブラウザキャッシュ内の画像データの存在を推測される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4692 2011-12-12 16:36 2011-12-7 Show GitHub Exploit DB Packet Storm
251500 5 警告 Google - Google Chrome におけるブラウザキャッシュ内の文書の存在を容易に推測される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4691 2011-12-12 16:34 2011-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266441 8.1 HIGH
Network
apache
oracle
struts
siebel_e-billing
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to … CWE-77
Command Injection
CVE-2016-3081 2024-11-21 11:49 2016-04-26 Show GitHub Exploit DB Packet Storm
266442 9.8 CRITICAL
Network
libgd
debian
fedoraproject
canonical
opensuse
php
libgd
debian_linux
fedora
ubuntu_linux
opensuse
php
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed g… CWE-681
 Incorrect Conversion between Numeric Types
CVE-2016-3074 2024-11-21 11:49 2016-04-26 Show GitHub Exploit DB Packet Storm
266443 6.1 MEDIUM
Network
blackberry enterprise_server Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted … CWE-79
Cross-site Scripting
CVE-2016-3126 2024-11-21 11:49 2016-04-23 Show GitHub Exploit DB Packet Storm
266444 4.6 MEDIUM
Physics
lexmark printer_firmware Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows ph… CWE-200
Information Exposure
CVE-2016-3145 2024-11-21 11:49 2016-04-22 Show GitHub Exploit DB Packet Storm
266445 7.5 HIGH
Network
opensuse
cairographics
opensuse
cairo
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a neg… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3190 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266446 6.4 MEDIUM
Network
oracle agile_product_lifecycle_management_framework Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and in… NVD-CWE-noinfo
CVE-2016-3431 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266447 4.5 MEDIUM
Physics
oracle retail_xstore_point_of_service Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentia… NVD-CWE-noinfo
CVE-2016-3429 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266448 3.1 LOW
Adjacent
oracle agile_engineering_data_management Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect availability via vector… NVD-CWE-noinfo
CVE-2016-3428 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266449 3.1 LOW
Network
oracle jdk
jre
Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE. NVD-CWE-noinfo
CVE-2016-3426 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm
266450 4.3 MEDIUM
Network
oracle jrockit
jdk
jre
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP. NVD-CWE-noinfo
CVE-2016-3425 2024-11-21 11:49 2016-04-21 Show GitHub Exploit DB Packet Storm