Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252081 4.3 警告 Infoproject - Infoproject Biznis Heroj におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5040 2012-01-5 14:27 2011-12-30 Show GitHub Exploit DB Packet Storm
252082 7.5 危険 Infoproject - Infoproject Biznis Heroj における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5039 2012-01-5 14:26 2011-12-30 Show GitHub Exploit DB Packet Storm
252083 7.5 危険 hitCode - hitCode hitAppoint における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5038 2012-01-5 14:24 2011-12-30 Show GitHub Exploit DB Packet Storm
252084 4.4 警告 ConfigServer - ConfigServer Security & Firewall におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5033 2012-01-5 14:21 2011-12-10 Show GitHub Exploit DB Packet Storm
252085 4.9 警告 WinMount - WinMount の WMDrive.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-5032 2012-01-5 14:20 2011-12-29 Show GitHub Exploit DB Packet Storm
252086 7.5 危険 Shilpi Computers Limited. - cApexWEB の servlet/capexweb.parentvalidatepassword における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5031 2012-01-5 14:19 2011-12-29 Show GitHub Exploit DB Packet Storm
252087 3.5 注意 valthebald - Drupal 用 Meta tags quick モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5030 2012-01-5 14:18 2011-12-14 Show GitHub Exploit DB Packet Storm
252088 4.3 警告 Alexander Palmo - Simple PHP Blog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5029 2012-01-5 11:07 2011-12-29 Show GitHub Exploit DB Packet Storm
252089 4 警告 Novell - Novell Sentinel Log Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5028 2012-01-5 10:49 2011-12-29 Show GitHub Exploit DB Packet Storm
252090 4.3 警告 Zabbix - Zabbix におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5027 2012-01-5 10:49 2011-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265531 7.5 HIGH
Network 		zulip zulip In zulip before 1.3.12, deactivated users could access messages if SSO was enabled. NVD-CWE-noinfo
CVE-2016-4427 2024-11-21 11:52 2022-07-29 Show GitHub Exploit DB Packet Storm
265532 4.3 MEDIUM
Network 		zulip zulip In zulip before 1.3.12, bot API keys were accessible to other users in the same realm. NVD-CWE-noinfo
CVE-2016-4426 2024-11-21 11:52 2022-07-29 Show GitHub Exploit DB Packet Storm
265533 9.8 CRITICAL
Network 		haxx curl Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass … NVD-CWE-noinfo
CVE-2016-4606 2024-11-21 11:52 2020-02-21 Show GitHub Exploit DB Packet Storm
265534 7.5 HIGH
Network 		apple mac_os_x
safari 		A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information. CWE-200
Information Exposure 		CVE-2016-4676 2024-11-21 11:52 2020-02-4 Show GitHub Exploit DB Packet Storm
265535 8.8 HIGH
Network 		webkitgtk
canonical 		webkitgtk\+
ubuntu_linux 		WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS CWE-416
 Use After Free 		CVE-2016-4761 2024-11-21 11:52 2020-01-23 Show GitHub Exploit DB Packet Storm
265536 8.8 HIGH
Network 		cloudera cdh In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. CWE-863
 Incorrect Authorization 		CVE-2016-4572 2024-11-21 11:52 2019-11-26 Show GitHub Exploit DB Packet Storm
265537 9.8 CRITICAL
Network 		arubanetworks clearpass Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials. CWE-522
 Insufficiently Protected Credentials 		CVE-2016-4401 2024-11-21 11:52 2019-11-7 Show GitHub Exploit DB Packet Storm
265538 6.5 MEDIUM
Network 		apple iphone_os
mac_os
apple_tv 		In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue … CWE-200
Information Exposure 		CVE-2016-4644 2024-11-21 11:52 2019-01-12 Show GitHub Exploit DB Packet Storm
265539 6.5 MEDIUM
Network 		apple iphone_os
mac_os
apple_tv 		In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through … CWE-200
Information Exposure 		CVE-2016-4643 2024-11-21 11:52 2019-01-12 Show GitHub Exploit DB Packet Storm
265540 5.9 MEDIUM
Network 		apple iphone_os
mac_os
apple_tv 		In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This is… CWE-254
 7PK - Security Features 		CVE-2016-4642 2024-11-21 11:52 2019-01-12 Show GitHub Exploit DB Packet Storm