Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252221 8.5 危険 サン・マイクロシステムズ - Sun Solaris および OpenSolaris における MAC のポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7300 2012-02-9 10:59 2011-10-5 Show GitHub Exploit DB Packet Storm
252222 2.1 注意 Apache Software Foundation - Apache JServ における JDBC パスワードまたはその他の重要な情報を見つけられる脆弱性 CWE-16
環境設定
CVE-2000-1247 2012-02-9 10:58 2011-10-5 Show GitHub Exploit DB Packet Storm
252223 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1007 2012-02-8 16:35 2012-02-7 Show GitHub Exploit DB Packet Storm
252224 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1006 2012-02-8 16:34 2012-02-7 Show GitHub Exploit DB Packet Storm
252225 10 危険 シマンテック - Symantec pcAnywhere 製品におけるクライアントへアクセスされる脆弱性 CWE-noinfo
情報不足
CVE-2012-0290 2012-02-8 16:33 2012-01-24 Show GitHub Exploit DB Packet Storm
252226 7.1 危険 IBM - IBM AIX の TCP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-0194 2012-02-8 16:28 2012-02-3 Show GitHub Exploit DB Packet Storm
252227 10 危険 Broadwin - Advantech/BroadWin WebAccess の webvrpcs.exe における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-4041 2012-02-8 16:27 2012-02-6 Show GitHub Exploit DB Packet Storm
252228 5 警告 Opera Software ASA - Opera における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-1003 2012-02-8 16:18 2012-02-7 Show GitHub Exploit DB Packet Storm
252229 4 警告 DELL EMC (旧 EMC Corporation) - EMC Documentum xPlore におけるオブジェクトの存在を特定される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0396 2012-02-8 16:15 2012-02-6 Show GitHub Exploit DB Packet Storm
252230 8.5 危険 シーメンス - 複数の Siemens 製品の HMI Web サーバにおける任意のメモリロケーションからデータを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2011-4879 2012-02-8 11:12 2012-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264921 7.5 HIGH
Network
exponentcms exponent_cms SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related … CWE-89
SQL Injection
CVE-2016-9283 2024-11-21 12:00 2016-11-12 Show GitHub Exploit DB Packet Storm
264922 7.5 HIGH
Network
exponentcms exponent_cms SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the search_… CWE-89
SQL Injection
CVE-2016-9282 2024-11-21 12:00 2016-11-12 Show GitHub Exploit DB Packet Storm
264923 7.5 HIGH
Network
samsung samsung_mobile Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an activity that computes an o… CWE-190
 Integer Overflow or Wraparound
CVE-2016-9277 2024-11-21 12:00 2016-11-12 Show GitHub Exploit DB Packet Storm
264924 7.8 HIGH
Local
git_for_windows_project git_for_windows Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected. CWE-426
 Untrusted Search Path
CVE-2016-9274 2024-11-21 12:00 2016-11-12 Show GitHub Exploit DB Packet Storm
264925 9.1 CRITICAL
Network
exponentcms exponent_cms A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service. CWE-89
SQL Injection
CVE-2016-9272 2024-11-21 12:00 2016-11-11 Show GitHub Exploit DB Packet Storm
264926 7.2 HIGH
Network
dotclear dotclear Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitr… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2016-9268 2024-11-21 12:00 2016-11-11 Show GitHub Exploit DB Packet Storm
264927 8.8 HIGH
Local
nvidia geforce_experience For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys)… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-8812 2024-11-21 12:00 2016-11-9 Show GitHub Exploit DB Packet Storm
264928 7.8 HIGH
Local
nvidia gpu_driver For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-8811 2024-11-21 12:00 2016-11-9 Show GitHub Exploit DB Packet Storm
264929 7.8 HIGH
Local
nvidia gpu_driver For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-8810 2024-11-21 12:00 2016-11-9 Show GitHub Exploit DB Packet Storm
264930 7.8 HIGH
Local
nvidia gpu_driver For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler … CWE-264
CWE-20
Permissions, Privileges, and Access Controls
 Improper Input Validation 
CVE-2016-8809 2024-11-21 12:00 2016-11-9 Show GitHub Exploit DB Packet Storm