Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252281 5 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の encryptPassword 関数における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-1509 2011-09-26 15:42 2011-09-20 Show GitHub Exploit DB Packet Storm
252282 4.3 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の SolutionSearch.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1510 2011-09-26 15:41 2011-09-20 Show GitHub Exploit DB Packet Storm
252283 10 危険 Measuresoft Development Ltd. - Measuresoft ScadaPro の service.exe における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3496 2011-09-26 15:40 2011-09-7 Show GitHub Exploit DB Packet Storm
252284 10 危険 Measuresoft Development Ltd. - Measuresoft ScadaPro の service.exe における任意の DLL を実行される脆弱性 CWE-200
情報漏えい 		CVE-2011-3497 2011-09-26 15:40 2011-09-16 Show GitHub Exploit DB Packet Storm
252285 10 危険 Measuresoft Development Ltd. - Measuresoft ScadaPro の service.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3495 2011-09-26 15:39 2011-09-16 Show GitHub Exploit DB Packet Storm
252286 4.3 警告 TIBCO Software - TIBCO Managed File Transfer および Slingshot におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3423 2011-09-26 15:38 2011-09-13 Show GitHub Exploit DB Packet Storm
252287 4.3 警告 TIBCO Software - TIBCO Managed File Transfer および Slingshot における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2011-3424 2011-09-26 15:37 2011-09-13 Show GitHub Exploit DB Packet Storm
252288 10 危険 シスコシステムズ - Cisco Unified Service Monitor における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2738 2011-09-22 15:55 2011-09-14 Show GitHub Exploit DB Packet Storm
252289 6.8 警告 Jaspersoft - JasperServer にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1911 2011-09-22 15:54 2011-09-16 Show GitHub Exploit DB Packet Storm
252290 7.5 危険 LifeSize Communications - LifeSize Room appliance の Web インターフェイスにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2763 2011-09-22 15:50 2011-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265841 2.5 LOW
Local 		microsoft internet_explorer Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a… CWE-200
Information Exposure 		CVE-2016-3321 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265842 4.9 MEDIUM
Network 		microsoft
fedoraproject 		windows_server_2012
windows_10
windows_8.1
windows_rt_8.1
fedora 		Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or… CWE-254
 7PK - Security Features 		CVE-2016-3320 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265843 7.0 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
edge 		The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "… CWE-284
Improper Access Control 		CVE-2016-3319 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265844 7.8 HIGH
Local 		microsoft office Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Graphics Component Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3318 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265845 7.8 HIGH
Local 		microsoft word_for_mac
office
word
word_viewer 		Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Offi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3317 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265846 7.8 HIGH
Local 		microsoft word
word_for_mac 		Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3316 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265847 5.5 MEDIUM
Local 		microsoft onenote
onenote_for_mac 		Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Informati… CWE-200
Information Exposure 		CVE-2016-3315 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265848 7.8 HIGH
Local 		microsoft office
word_for_mac
word_viewer 		Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3313 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265849 9.1 CRITICAL
Network 		microsoft windows_10 ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Info… CWE-200
Information Exposure 		CVE-2016-3312 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
265850 7.8 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista 		The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3311 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm