Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251561 7.5 危険 Carnegie Mellon University (Project Cyrus)
レッドハット
- Cyrus IMAPd の NNTP サーバ (nntpd) 内の imap/nntpd.c における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-3372 2011-12-28 11:12 2011-12-24 Show GitHub Exploit DB Packet Storm
251562 6 警告 OpenStack - OpenStack Compute (Nova) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4596 2011-12-28 11:08 2011-12-23 Show GitHub Exploit DB Packet Storm
251563 9.3 危険 IBM
Blueberry Software
- Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-1388 2011-12-27 16:46 2011-12-23 Show GitHub Exploit DB Packet Storm
251564 9.3 危険 IBM
Blueberry Software
- Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-1391 2011-12-27 16:45 2011-12-23 Show GitHub Exploit DB Packet Storm
251565 9.3 危険 IBM
Blueberry Software
- Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-1392 2011-12-27 16:44 2011-12-23 Show GitHub Exploit DB Packet Storm
251566 4.3 警告 The Tor Project - Tor における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4897 2011-12-27 11:17 2011-12-23 Show GitHub Exploit DB Packet Storm
251567 4.3 警告 The Tor Project - Tor における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4896 2011-12-27 11:13 2011-12-23 Show GitHub Exploit DB Packet Storm
251568 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい
CVE-2011-4895 2011-12-27 11:10 2011-12-23 Show GitHub Exploit DB Packet Storm
251569 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい
CVE-2011-4894 2011-12-27 11:06 2011-12-23 Show GitHub Exploit DB Packet Storm
251570 7.6 危険 The Tor Project - Tor におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2778 2011-12-27 11:04 2011-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266901 7.5 HIGH
Network
perl
debian
oracle
opensuse
canonical
perl
debian_linux
solaris
database_server
communications_billing_and_revenue_management
enterprise_manager_base_platform
configuration_manager
timesten_in-memory_database
open…
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp. CWE-20
 Improper Input Validation 
CVE-2016-2381 2024-11-21 11:48 2016-04-9 Show GitHub Exploit DB Packet Storm
266902 9.8 CRITICAL
Network
suse
opensuse
git-scm
openstack_cloud
linux_enterprise_software_development_kit
linux_enterprise_server
linux_enterprise_debuginfo
leap
opensuse
suse_linux_enterprise_server
git
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-2324 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266903 9.8 CRITICAL
Network
suse
opensuse
git-scm
openstack_cloud
linux_enterprise_software_development_kit
linux_enterprise_server
linux_enterprise_debuginfo
leap
opensuse
suse_linux_enterprise_server
git
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based b… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-2315 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266904 9.8 CRITICAL
Network
debian
opensuse
cypherpunks
debian_linux
leap
opensuse
libotr
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a s… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-2851 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266905 6.1 MEDIUM
Network
citrix xenmobile_server Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbi… CWE-79
Cross-site Scripting
CVE-2016-2789 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266906 9.8 CRITICAL
Network
9bis
simon_tatham
kitty
putty
Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service (stack memory corruption) or execute… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-2563 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266907 6.1 MEDIUM
Network
debian
websvn
debian_linux
websvn
Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php. CWE-79
Cross-site Scripting
CVE-2016-2511 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266908 7.5 HIGH
Network
nodejs
fedoraproject
node.js
fedora
The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response… CWE-20
 Improper Input Validation 
CVE-2016-2216 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266909 8.1 HIGH
Network
beanshell
debian
canonical
beanshell
debian_linux
ubuntu_linux
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, … CWE-19
 Data Processing Errors
CVE-2016-2510 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
266910 6.5 MEDIUM
Local
qemu
canonical
debian
qemu
ubuntu_linux
debian_linux
QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbit… CWE-331
 Insufficient Entropy
CVE-2016-2858 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm