Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 11, 2026, 12:16 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252051 | 7.8 | 危険 | Linux | - | Linux kernel の dccp_parse_options 関数における整数アンダーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2011-1770 | 2011-07-4 08:39 | 2011-05-18 | Show | GitHub Exploit DB Packet Storm |
| 252052 | 3.5 | 注意 | ターボリナックス Timo Sirainen |
- | Dovecot におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3779 | 2011-07-4 08:36 | 2010-10-2 | Show | GitHub Exploit DB Packet Storm |
| 252053 | 5.5 | 警告 | ターボリナックス Timo Sirainen |
- | Dovecot の plugins/acl/acl-backend-vfile.c におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3706 | 2011-07-4 08:33 | 2010-10-2 | Show | GitHub Exploit DB Packet Storm |
| 252054 | 6.4 | 警告 | ターボリナックス Timo Sirainen |
- | Dovecot の ACL プラグインにおけるメールボックスを読まれる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3304 | 2011-07-4 08:32 | 2010-07-24 | Show | GitHub Exploit DB Packet Storm |
| 252055 | 5.8 | 警告 | レッドハット | - | TigerVNC の vncviewer コンポネント内にある CSecurityTLS::processMsg 関数における TLS VNC サーバを偽造される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1775 | 2011-07-4 08:30 | 2011-05-26 | Show | GitHub Exploit DB Packet Storm |
| 252056 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2128 | 2011-07-1 15:32 | 2011-06-14 | Show | GitHub Exploit DB Packet Storm |
| 252057 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2127 | 2011-07-1 15:31 | 2011-06-14 | Show | GitHub Exploit DB Packet Storm |
| 252058 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2126 | 2011-07-1 15:30 | 2011-06-14 | Show | GitHub Exploit DB Packet Storm |
| 252059 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player の Dirapix.dll におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2125 | 2011-07-1 10:19 | 2011-06-14 | Show | GitHub Exploit DB Packet Storm |
| 252060 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2124 | 2011-07-1 10:17 | 2011-06-14 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 11, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 266421 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180). |
CWE-79
Cross-site Scripting |
CVE-2016-10780 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 266422 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179). |
CWE-79
Cross-site Scripting |
CVE-2016-10779 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 266423 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178). |
CWE-79
Cross-site Scripting |
CVE-2016-10778 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 266424 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177). |
CWE-79
Cross-site Scripting |
CVE-2016-10777 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 266425 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174). |
CWE-79
Cross-site Scripting |
CVE-2016-10776 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 266426 | 6.5 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173). |
CWE-20
Improper Input Validation |
CVE-2016-10775 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |
| 266427 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172). |
CWE-79
Cross-site Scripting |
CVE-2016-10774 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |
| 266428 | 8.8 |
HIGH
Network |
cpanel | cpanel | cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171). |
CWE-134
Use of Externally-Controlled Format String |
CVE-2016-10773 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |
| 266429 | 3.3 |
LOW
Local |
cpanel | cpanel | cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168). |
CWE-254
7PK - Security Features |
CVE-2016-10772 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |
| 266430 | 8.1 |
HIGH
Network |
cpanel | cpanel | cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing (SEC-165). |
CWE-20
Improper Input Validation |
CVE-2016-10771 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |