Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 18, 2026, 2:16 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251571 | 5.8 | 警告 | The Tor Project | - | Tor における匿名化のためのプロパティを無効にされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-2768 | 2011-12-27 10:54 | 2011-10-27 | Show | GitHub Exploit DB Packet Storm |
| 251572 | 7.5 | 危険 | PmWiki | - | PmWiki の PageListSort 関数における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4453 | 2011-12-27 10:46 | 2011-11-11 | Show | GitHub Exploit DB Packet Storm |
| 251573 | - | - | The Support Incident Tracker Project | - | Support Incident Tracker に複数の脆弱性 | - |
CVE-2011-3831 CVE-2011-3833 CVE-2011-5067 CVE-2011-5068 CVE-2011-5069 CVE-2011-5070 |
2011-12-27 09:42 | 2011-12-5 | Show | GitHub Exploit DB Packet Storm |
| 251574 | 9.3 | 危険 | Sielco Sistemi | - | Sielco Sistemi Winlog PRO および Winlog Lite におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4037 | 2011-12-26 16:32 | 2011-12-22 | Show | GitHub Exploit DB Packet Storm |
| 251575 | 5 | 警告 | Moodle | - | Moodle の calendar/set.php における CRLF インジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4203 | 2011-12-26 16:32 | 2011-12-22 | Show | GitHub Exploit DB Packet Storm |
| 251576 | 4.3 | 警告 | The phpMyAdmin Project | - | phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4634 | 2011-12-26 16:31 | 2011-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251577 | 4.3 | 警告 | The phpMyAdmin Project | - | phpMyAdmin の libraries/display_export.lib.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4780 | 2011-12-26 16:30 | 2011-12-21 | Show | GitHub Exploit DB Packet Storm |
| 251578 | 4.3 | 警告 | The phpMyAdmin Project | - | phpMyAdmin の libraries/config/ConfigFile.class.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4782 | 2011-12-26 16:29 | 2011-12-21 | Show | GitHub Exploit DB Packet Storm |
| 251579 | 6.5 | 警告 | WordPress.org | - | WordPress において任意の PHP コードが実行可能な脆弱性 |
CWE-94
コード・インジェクション |
- | 2011-12-26 14:27 | 2011-12-26 | Show | GitHub Exploit DB Packet Storm |
| 251580 | 4.3 | 警告 | WordPress.org | - | WordPress 日本語版におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
- | 2011-12-26 12:01 | 2011-12-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 18, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 266431 | 8.8 |
HIGH
Network |
debian mercurial |
debian_linux mercurial |
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name. |
CWE-284
Improper Access Control |
CVE-2016-3105 | 2024-11-21 11:49 | 2016-05-10 | Show | GitHub Exploit DB Packet Storm |
| 266432 | 4.6 |
MEDIUM
Physics |
canonical linux novell |
ubuntu_linux linux_kernel suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_real_time_extension su… |
The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and s… |
NVD-CWE-Other
|
CVE-2016-3140 | 2024-11-21 11:49 | 2016-05-2 | Show | GitHub Exploit DB Packet Storm |
| 266433 | 4.6 |
MEDIUM
Physics |
linux canonical novell |
linux_kernel ubuntu_linux suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_real_time_extension su… |
The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) v… |
NVD-CWE-Other
|
CVE-2016-3138 | 2024-11-21 11:49 | 2016-05-2 | Show | GitHub Exploit DB Packet Storm |
| 266434 | 4.6 |
MEDIUM
Physics |
novell canonical linux |
suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_real_time_extension suse_linux_enterprise_desktop s… |
drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device withou… |
NVD-CWE-Other
|
CVE-2016-3137 | 2024-11-21 11:49 | 2016-05-2 | Show | GitHub Exploit DB Packet Storm |
| 266435 | 4.6 |
MEDIUM
Physics |
linux novell canonical |
linux_kernel suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_desktop suse_linux_enterprise_real_tim… |
The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and s… |
NVD-CWE-Other
|
CVE-2016-3136 | 2024-11-21 11:49 | 2016-05-2 | Show | GitHub Exploit DB Packet Storm |
| 266436 | 5.5 |
MEDIUM
Local |
novell canonical linux |
suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_real_time_extension suse_linux_enterprise_desktop s… |
The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging fo… |
CWE-399
Resource Management Errors |
CVE-2016-3156 | 2024-11-21 11:49 | 2016-04-28 | Show | GitHub Exploit DB Packet Storm |
| 266437 | 7.8 |
HIGH
Local |
linux canonical |
linux_kernel ubuntu_linux |
Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of servi… |
CWE-189 NVD-CWE-Other Numeric Errors |
CVE-2016-3135 | 2024-11-21 11:49 | 2016-04-28 | Show | GitHub Exploit DB Packet Storm |
| 266438 | 4.6 |
MEDIUM
Physics |
novell linux |
suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_real_time_extension suse_linux_enterprise_desktop s… |
The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system cr… |
NVD-CWE-Other
|
CVE-2016-3139 | 2024-11-21 11:49 | 2016-04-28 | Show | GitHub Exploit DB Packet Storm |
| 266439 | 8.4 |
HIGH
Local |
novell linux |
suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_desktop suse_linux_enterprise_real_time_extension s… |
The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) vi… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-3134 | 2024-11-21 11:49 | 2016-04-28 | Show | GitHub Exploit DB Packet Storm |
| 266440 | 9.8 |
CRITICAL
Network |
apache | struts | XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter. |
CWE-20
Improper Input Validation |
CVE-2016-3082 | 2024-11-21 11:49 | 2016-04-26 | Show | GitHub Exploit DB Packet Storm |