Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252241	4.3	警告	e107.org	-	e107 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4920	2012-01-6 15:28	2012-01-4	Show	GitHub Exploit DB Packet Storm

252242	4.3	警告	IBM	-	IBM TFIM および TFIMBG における意図された認証または認証要件を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1386	2012-01-6 15:26	2011-12-13	Show	GitHub Exploit DB Packet Storm

252243	4	警告	IBM	-	IBM AIX 上の invscout.rte における任意のファイルを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-1384	2012-01-6 15:24	2011-12-2	Show	GitHub Exploit DB Packet Storm

252244	4.3	警告	IBM	-	IBM Web Experience Factory におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5048	2012-01-6 15:23	2012-01-3	Show	GitHub Exploit DB Packet Storm

252245	4.3	警告	Electric Sheep Fencing	-	pfSense におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5047	2012-01-6 15:22	2012-01-3	Show	GitHub Exploit DB Packet Storm

252246	7.5	危険	Electric Sheep Fencing	-	pfSense における証明書を作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4197	2012-01-6 15:21	2011-12-20	Show	GitHub Exploit DB Packet Storm

252247	4.3	警告	Splunk	-	Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4778	2012-01-5 16:29	2011-12-12	Show	GitHub Exploit DB Packet Storm

252248	9.3	危険	Splunk	-	Splunk における任意のファイルを読まれる脆弱性	CWE-287 不適切な認証	CVE-2011-4644	2012-01-5 16:28	2012-01-3	Show	GitHub Exploit DB Packet Storm

252249	4	警告	Splunk	-	Splunk におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4643	2012-01-5 16:27	2011-12-12	Show	GitHub Exploit DB Packet Storm

252250	4.6	警告	Splunk	-	Splunk の Splunk Web 内にある mappy.py における任意のコードを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4642	2012-01-5 16:27	2011-12-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265131	5.4	MEDIUM Network	symantec	it_management_suite	A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0.	CWE-79 Cross-site Scripting	CVE-2016-6588	2024-11-21 11:56	2020-01-9	Show	GitHub Exploit DB Packet Storm

265132	3.7	LOW Network	symantec	norton_mobile_security	A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add…	CWE-20 Improper Input Validation	CVE-2016-6586	2024-11-21 11:56	2020-01-9	Show	GitHub Exploit DB Packet Storm

265133	7.8	HIGH Local	symantec	vip_access_desktop	A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code.	CWE-426 Untrusted Search Path	CVE-2016-6593	2024-11-21 11:56	2020-01-9	Show	GitHub Exploit DB Packet Storm

265134	7.1	HIGH Physics	symantec	norton_app_lock	A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let a local malicious user bypass security restrictions.	CWE-863 Incorrect Authorization	CVE-2016-6591	2024-11-21 11:56	2020-01-9	Show	GitHub Exploit DB Packet Storm

265135	7.8	HIGH Local	symantec	it_management_suite ghost_solution_suite endpoint_encryption encryption_desktop	A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Su…	CWE-269 Improper Privilege Management	CVE-2016-6590	2024-11-21 11:56	2020-01-9	Show	GitHub Exploit DB Packet Storm

265136	6.5	MEDIUM Network	symantec	it_management_suite	A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0.	CWE-20 Improper Input Validation	CVE-2016-6589	2024-11-21 11:56	2020-01-9	Show	GitHub Exploit DB Packet Storm

265137	8.8	HIGH Network	filecloud	filecloud	CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, p…	CWE-352 Origin Validation Error	CVE-2016-6578	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

265138	9.8	CRITICAL Network	sungardas	etrakit3	The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unaut…	CWE-89 SQL Injection	CVE-2016-6566	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

265139	7.5	HIGH Network	imagely	nextgen_gallery	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user t…	CWE-20 Improper Input Validation	CVE-2016-6565	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

265140	7.5	HIGH Adjacent	mitel	shortel_mobility_client	On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position …	CWE-295 Improper Certificate Validation	CVE-2016-6562	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed