Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252231 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3687 2011-10-3 14:56 2011-09-27 Show GitHub Exploit DB Packet Storm
252232 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3686 2011-10-3 14:55 2011-09-27 Show GitHub Exploit DB Packet Storm
252233 1.9 注意 Tembria - Tembria Server Monitor における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3685 2011-10-3 14:54 2011-09-27 Show GitHub Exploit DB Packet Storm
252234 4.3 警告 Tembria - Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3684 2011-10-3 14:52 2011-09-27 Show GitHub Exploit DB Packet Storm
252235 7.5 危険 Newgen Software Technologies Limited - Newgen OmniDocs におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3645 2011-10-3 14:48 2011-09-27 Show GitHub Exploit DB Packet Storm
252236 7.5 危険 AliBabaClone.com - Alibaba Clone B2B の countrydetails.php におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4849 2011-09-30 14:24 2011-09-27 Show GitHub Exploit DB Packet Storm
252237 4.3 警告 Diferior - Diferior におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4850 2011-09-30 14:22 2011-09-27 Show GitHub Exploit DB Packet Storm
252238 7.5 危険 Eclime - Eclime における複数の SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4851 2011-09-30 14:19 2011-09-27 Show GitHub Exploit DB Packet Storm
252239 4.3 警告 Eclime - Eclime の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4852 2011-09-30 14:15 2011-09-27 Show GitHub Exploit DB Packet Storm
252240 7.5 危険 Zoho Corporation - ManageEngine EventLog Analyzer の Syslog サーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4840 2011-09-30 14:13 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265841 2.5 LOW
Local 		microsoft internet_explorer Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a… CWE-200
Information Exposure 		CVE-2016-3321 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265842 4.9 MEDIUM
Network 		microsoft
fedoraproject 		windows_server_2012
windows_10
windows_8.1
windows_rt_8.1
fedora 		Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or… CWE-254
 7PK - Security Features 		CVE-2016-3320 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265843 7.0 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
edge 		The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "… CWE-284
Improper Access Control 		CVE-2016-3319 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265844 7.8 HIGH
Local 		microsoft office Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Graphics Component Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3318 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265845 7.8 HIGH
Local 		microsoft word_for_mac
office
word
word_viewer 		Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Offi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3317 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265846 7.8 HIGH
Local 		microsoft word
word_for_mac 		Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3316 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265847 5.5 MEDIUM
Local 		microsoft onenote
onenote_for_mac 		Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Informati… CWE-200
Information Exposure 		CVE-2016-3315 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265848 7.8 HIGH
Local 		microsoft office
word_for_mac
word_viewer 		Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3313 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265849 9.1 CRITICAL
Network 		microsoft windows_10 ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Info… CWE-200
Information Exposure 		CVE-2016-3312 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265850 7.8 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista 		The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3311 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm