Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252101	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3514	2012-01-20 16:43	2012-01-17	Show	GitHub Exploit DB Packet Storm

252102	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3509	2012-01-20 16:40	2012-01-17	Show	GitHub Exploit DB Packet Storm

252103	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2326	2012-01-20 16:39	2012-01-17	Show	GitHub Exploit DB Packet Storm

252104	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2325	2012-01-20 16:28	2012-01-17	Show	GitHub Exploit DB Packet Storm

252105	4	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2321	2012-01-20 16:27	2012-01-17	Show	GitHub Exploit DB Packet Storm

252106	5	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2324	2012-01-20 16:26	2012-01-17	Show	GitHub Exploit DB Packet Storm

252107	3.5	注意	オラクル	-	Oracle E-Business Suite における Attachments / File Upload の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2271	2012-01-20 15:44	2012-01-17	Show	GitHub Exploit DB Packet Storm

252108	4	警告	オラクル	-	Oracle E-Business Suite における REST Services の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0078	2012-01-20 15:43	2012-01-17	Show	GitHub Exploit DB Packet Storm

252109	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Forms コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0073	2012-01-20 15:43	2012-01-17	Show	GitHub Exploit DB Packet Storm

252110	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Content コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0084	2012-01-20 15:41	2012-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265331	5.5	MEDIUM Local	netiq	access_manager	NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML Extern…	CWE-611 XXE	CVE-2016-5749	2024-11-21 11:54	2017-03-23	Show	GitHub Exploit DB Packet Storm

265332	5.5	MEDIUM Local	netiq	access_manager	External Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to disclose the content of local f…	CWE-611 XXE	CVE-2016-5748	2024-11-21 11:54	2017-03-23	Show	GitHub Exploit DB Packet Storm

265333	7.5	HIGH Network	novell	edirectory	A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging pre…	CWE-284 Improper Access Control	CVE-2016-5747	2024-11-21 11:54	2017-03-23	Show	GitHub Exploit DB Packet Storm

265334	5.5	MEDIUM Local	libtiff debian	libtiff debian_linux	The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.	CWE-125 Out-of-bounds Read	CVE-2016-5315	2024-11-21 11:54	2017-03-8	Show	GitHub Exploit DB Packet Storm

265335	8.8	HIGH Network	netapp	data_ontap	NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the owner_rights ACL e…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-5374	2024-11-21 11:54	2017-03-2	Show	GitHub Exploit DB Packet Storm

265336	6.1	MEDIUM Network	mantisbt	mantisbt	Cross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19 and earlier allows remote attackers to inject arbitrary web script or HTML via the return parameter.	CWE-79 Cross-site Scripting	CVE-2016-5364	2024-11-21 11:54	2017-02-18	Show	GitHub Exploit DB Packet Storm

265337	7.5	HIGH Network	gnu	glibc	Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (me…	CWE-399 Resource Management Errors	CVE-2016-5417	2024-11-21 11:54	2017-02-17	Show	GitHub Exploit DB Packet Storm

265338	8.8	HIGH Network	simplemachines	simple_machines_forum	LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input…	CWE-94 Code Injection	CVE-2016-5727	2024-11-21 11:54	2017-02-10	Show	GitHub Exploit DB Packet Storm

265339	9.8	CRITICAL Network	simplemachines	simple_machines_forum	Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.	CWE-94 Code Injection	CVE-2016-5726	2024-11-21 11:54	2017-02-10	Show	GitHub Exploit DB Packet Storm

265340	9.8	CRITICAL Network	netapp	virtual_storage_console_for_vmware_vsphere	NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5711	2024-11-21 11:54	2017-02-8	Show	GitHub Exploit DB Packet Storm