Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252001 6.4 警告 Kaixin001 - Android 用 Kaixin001 における連絡先情報および平文パスワードを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-4866 2012-01-27 15:18 2012-01-25 Show GitHub Exploit DB Packet Storm
252002 5.8 警告 Tencent - Android 用 Tencent WBlog および MicroBlogPad におけるドラフトメッセージおよび検索キーワードを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4865 2012-01-27 15:12 2012-01-25 Show GitHub Exploit DB Packet Storm
252003 5.8 警告 Tencent - Android 用 Tencent MobileQQ におけるメッセージおよびフレンドリストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4864 2012-01-27 15:10 2012-01-25 Show GitHub Exploit DB Packet Storm
252004 5.8 警告 Tencent - Android 用 Tencent QQPimSecure における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4863 2012-01-27 15:08 2012-01-25 Show GitHub Exploit DB Packet Storm
252005 5.8 警告 AnGuanJia - Android 用 AnGuanJia における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4773 2012-01-27 15:07 2012-01-25 Show GitHub Exploit DB Packet Storm
252006 5.8 警告 Qihoo 360 Technology - Android 用 360 KouXin における SMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4772 2012-01-27 15:06 2012-01-25 Show GitHub Exploit DB Packet Storm
252007 5.8 警告 Lucion Technologies - Android 用 Scan to PDF Free におけるスキャンされたファイルおよび Google アカウントを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4771 2012-01-27 15:05 2012-01-25 Show GitHub Exploit DB Packet Storm
252008 5.8 警告 QIWI Wallet - Android 用 QIWI Wallet における金銭に関する情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4770 2012-01-27 15:03 2012-01-25 Show GitHub Exploit DB Packet Storm
252009 5.8 警告 Qihoo 360 Technology - Android 用 360 MobileSafe における SMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4769 2012-01-27 14:56 2012-01-25 Show GitHub Exploit DB Packet Storm
252010 5.8 警告 Ming Software - Android 用 Ming Blacklist Free におけるブラックリストおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4705 2012-01-27 14:56 2012-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253841 7.5 HIGH
Network
ibm infosphere_master_data_management IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892. CWE-306
Missing Authentication for Critical Function
CVE-2017-1523 2024-11-21 12:22 2017-10-25 Show GitHub Exploit DB Packet Storm
253842 8.8 HIGH
Network
panasonic kx-hjb1000_firmware SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vecto… CWE-89
SQL Injection
CVE-2017-2133 2024-11-21 12:22 2017-10-20 Show GitHub Exploit DB Packet Storm
253843 7.5 HIGH
Network
panasonic kx-hjb1000_firmware Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary files in a specific directory via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2017-2132 2024-11-21 12:22 2017-10-20 Show GitHub Exploit DB Packet Storm
253844 5.3 MEDIUM
Network
panasonic kx-hjb1000_firmware Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access restrictions to view the configuration menu via unspecified vectors. CWE-200
Information Exposure
CVE-2017-2131 2024-11-21 12:22 2017-10-20 Show GitHub Exploit DB Packet Storm
253845 6.5 MEDIUM
Network
ibm financial_transaction_manager IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735. CWE-200
Information Exposure
CVE-2017-1538 2024-11-21 12:22 2017-10-11 Show GitHub Exploit DB Packet Storm
253846 5.4 MEDIUM
Network
ibm content_navigator IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended… CWE-79
Cross-site Scripting
CVE-2017-1522 2024-11-21 12:22 2017-10-6 Show GitHub Exploit DB Packet Storm
253847 7.3 HIGH
Network
ibm aix A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809. CWE-20
 Improper Input Validation 
CVE-2017-1541 2024-11-21 12:22 2017-10-4 Show GitHub Exploit DB Packet Storm
253848 7.5 HIGH
Network
ibm websphere_commerce IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service. IBM X-Force ID: 131779. NVD-CWE-noinfo
CVE-2017-1569 2024-11-21 12:22 2017-10-3 Show GitHub Exploit DB Packet Storm
253849 6.1 MEDIUM
Network
ibm datapower_gateway IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended… CWE-79
Cross-site Scripting
CVE-2017-1591 2024-11-21 12:22 2017-09-28 Show GitHub Exploit DB Packet Storm
253850 7.5 HIGH
Network
ibm websphere_portal IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences … CWE-22
Path Traversal
CVE-2017-1577 2024-11-21 12:22 2017-09-28 Show GitHub Exploit DB Packet Storm