Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251971 7.5 危険 Raphael Zschorsch - TYPO3 用の Commenting system Backend Module における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4887 2012-01-19 11:17 2010-09-2 Show GitHub Exploit DB Packet Storm
251972 4.3 警告 Peter Proell - TYPO3 用の official twitter tweet button for your page におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4886 2012-01-19 11:10 2010-09-2 Show GitHub Exploit DB Packet Storm
251973 4.3 警告 Peter Proell - TYPO3 用の XING Button におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4885 2012-01-19 11:09 2010-09-2 Show GitHub Exploit DB Packet Storm
251974 7.5 危険 Hinnendahl - Gaestebuch の guestbook/gbook.php におけるリモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4884 2012-01-19 11:08 2011-10-7 Show GitHub Exploit DB Packet Storm
251975 2.6 注意 MODX - MODx Revolution の manager/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4883 2012-01-19 11:06 2011-10-7 Show GitHub Exploit DB Packet Storm
251976 4.3 警告 Ventics - Auto CMS の autocms.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4882 2012-01-19 11:06 2011-10-7 Show GitHub Exploit DB Packet Storm
251977 6.8 警告 ApPHP - ApPHP Calendar の calendar.class.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-4881 2012-01-19 10:33 2011-10-7 Show GitHub Exploit DB Packet Storm
251978 4.3 警告 ApPHP - ApPHP Calendar の calendar.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4880 2012-01-19 10:33 2011-10-7 Show GitHub Exploit DB Packet Storm
251979 7.5 危険 Hinnendahl - Kontakt Formular の formmailer.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4878 2012-01-19 10:32 2011-10-7 Show GitHub Exploit DB Packet Storm
251980 4.3 警告 InsaneVisions - OneCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4877 2012-01-19 10:31 2011-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265701 7.8 HIGH
Local 		apple mac_os_x AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability th… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4699 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265702 7.8 HIGH
Local 		apple iphone_os
mac_os_x 		AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, which allows attackers to execute arbitrar… CWE-20
 Improper Input Validation  		CVE-2016-4698 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265703 7.8 HIGH
Local 		apple mac_os_x Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4697 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265704 7.8 HIGH
Local 		apple mac_os_x AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. CWE-476
 NULL Pointer Dereference 		CVE-2016-4696 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265705 9.1 CRITICAL
Network 		apple mac_os_x
os_x_server 		The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data… CWE-284
Improper Access Control 		CVE-2016-4694 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265706 9.8 CRITICAL
Network 		apple
xmlsoft 		watchos
tvos
iphone_os
mac_os_x
libxml2 		xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, wh… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4658 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265707 6.1 MEDIUM
Network 		apple safari
iphone_os 		Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Unive… CWE-79
Cross-site Scripting 		CVE-2016-4618 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265708 8.8 HIGH
Network 		apple tvos
iphone_os
safari 		WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differ… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4611 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
265709 9.8 CRITICAL
Network 		apache cxf_fediz The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers… CWE-284
Improper Access Control 		CVE-2016-4464 2024-11-21 11:52 2016-09-22 Show GitHub Exploit DB Packet Storm
265710 8.6 HIGH
Network 		hp performance_center
loadrunner 		HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors. NVD-CWE-noinfo
CVE-2016-4384 2024-11-21 11:52 2016-09-21 Show GitHub Exploit DB Packet Storm