Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251821 5.8 警告 Tencent - Android 用 Tencent MobileQQ におけるメッセージおよびフレンドリストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4864 2012-01-27 15:10 2012-01-25 Show GitHub Exploit DB Packet Storm
251822 5.8 警告 Tencent - Android 用 Tencent QQPimSecure における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4863 2012-01-27 15:08 2012-01-25 Show GitHub Exploit DB Packet Storm
251823 5.8 警告 AnGuanJia - Android 用 AnGuanJia における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4773 2012-01-27 15:07 2012-01-25 Show GitHub Exploit DB Packet Storm
251824 5.8 警告 Qihoo 360 Technology - Android 用 360 KouXin における SMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4772 2012-01-27 15:06 2012-01-25 Show GitHub Exploit DB Packet Storm
251825 5.8 警告 Lucion Technologies - Android 用 Scan to PDF Free におけるスキャンされたファイルおよび Google アカウントを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4771 2012-01-27 15:05 2012-01-25 Show GitHub Exploit DB Packet Storm
251826 5.8 警告 QIWI Wallet - Android 用 QIWI Wallet における金銭に関する情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4770 2012-01-27 15:03 2012-01-25 Show GitHub Exploit DB Packet Storm
251827 5.8 警告 Qihoo 360 Technology - Android 用 360 MobileSafe における SMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4769 2012-01-27 14:56 2012-01-25 Show GitHub Exploit DB Packet Storm
251828 5.8 警告 Ming Software - Android 用 Ming Blacklist Free におけるブラックリストおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4705 2012-01-27 14:56 2012-01-25 Show GitHub Exploit DB Packet Storm
251829 5.8 警告 Voxofon LLC - Android 用 Voxofon における SMS 情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4704 2012-01-27 14:54 2012-01-25 Show GitHub Exploit DB Packet Storm
251830 5.8 警告 Nathaniel Kh - Android 用 Limit My Call における通話履歴および連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4703 2012-01-27 14:52 2012-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
302891 - tibco rendezvous
enterprise_message_service
runtime_agent
silver_bpm_service
silver_cap_service
silver_businessworks_service 		Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before … NVD-CWE-noinfo
CVE-2011-0649 2024-11-21 10:24 2011-02-4 Show GitHub Exploit DB Packet Storm
302892 - mediawiki mediawiki Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions before 1.16.2, when running on Windows and possibly No… CWE-22
Path Traversal 		CVE-2011-0537 2024-11-21 10:24 2011-02-4 Show GitHub Exploit DB Packet Storm
302893 - plone
redhat 		plone
conga
luci 		Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and… NVD-CWE-noinfo
CVE-2011-0720 2024-11-21 10:24 2011-02-4 Show GitHub Exploit DB Packet Storm
302894 - lockon ec-cube Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote… CWE-79
Cross-site Scripting 		CVE-2011-0451 2024-11-21 10:24 2011-02-4 Show GitHub Exploit DB Packet Storm
302895 - ibm db2 IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL state… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-0757 2024-11-21 10:24 2011-02-3 Show GitHub Exploit DB Packet Storm
302896 - linux linux_kernel The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain integer field, which allows local users to cause a denial o… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-0521 2024-11-21 10:24 2011-02-3 Show GitHub Exploit DB Packet Storm
302897 - php php Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, a… CWE-189
Numeric Errors 		CVE-2011-0755 2024-11-21 10:24 2011-02-3 Show GitHub Exploit DB Packet Storm
302898 - php php The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to con… CWE-59
Link Following 		CVE-2011-0754 2024-11-21 10:24 2011-02-3 Show GitHub Exploit DB Packet Storm
302899 - php php Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory corruption) via a la… CWE-362
Race Condition 		CVE-2011-0753 2024-11-21 10:24 2011-02-3 Show GitHub Exploit DB Packet Storm
302900 - php php The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which allows context-dependent… CWE-20
 Improper Input Validation  		CVE-2011-0752 2024-11-21 10:24 2011-02-3 Show GitHub Exploit DB Packet Storm