Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252281 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0147 2011-04-1 15:23 2011-03-3 Show GitHub Exploit DB Packet Storm
252282 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0146 2011-04-1 15:20 2011-03-3 Show GitHub Exploit DB Packet Storm
252283 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0145 2011-04-1 15:18 2011-03-3 Show GitHub Exploit DB Packet Storm
252284 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0144 2011-04-1 15:11 2011-03-3 Show GitHub Exploit DB Packet Storm
252285 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0143 2011-04-1 15:08 2011-03-3 Show GitHub Exploit DB Packet Storm
252286 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0142 2011-04-1 15:05 2011-03-3 Show GitHub Exploit DB Packet Storm
252287 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0141 2011-04-1 15:04 2011-03-3 Show GitHub Exploit DB Packet Storm
252288 5 警告 The PHP Group
アップル		 - PHP の fopen_wrappers.c における open_basedir 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3436 2011-04-1 14:59 2010-11-9 Show GitHub Exploit DB Packet Storm
252289 6.8 警告 The PHP Group
アップル		 - PHP の phar 拡張における重要な情報を取得される脆弱性 CWE-134
書式文字列の問題 		CVE-2010-2950 2011-04-1 14:51 2010-05-14 Show GitHub Exploit DB Packet Storm
252290 7.6 危険 アップル - 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0140 2011-03-31 14:39 2011-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266441 5.9 MEDIUM
Network 		airbrake airbrake The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could… CWE-310
CWE-200
Cryptographic Issues
Information Exposure 		CVE-2016-10530 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266442 8.8 HIGH
Network 		droppy_project droppy Droppy versions <3.5.0 does not perform any verification for cross-domain websocket requests. An attacker is able to make a specially crafted page that can send requests as the context of the current… CWE-352
 Origin Validation Error 		CVE-2016-10529 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266443 4.9 MEDIUM
Network 		restafary_project restafary restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it … CWE-22
Path Traversal 		CVE-2016-10528 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266444 8.8 HIGH
Network 		express-restify-mongoose_project express-restify-mongoose express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send… CWE-200
Information Exposure 		CVE-2016-10533 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266445 9.8 CRITICAL
Network 		console-io_project console-io console-io is a module that allows users to implement a web console in their application. A malicious user could bypass the authentication and execute any command that the user who is running the con… CWE-287
Improper Authentication 		CVE-2016-10532 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266446 7.5 HIGH
Network 		riot.js riot-compiler The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions. CWE-399
 Resource Management Errors 		CVE-2016-10527 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266447 8.6 HIGH
Network 		grunt-gh-pages_project grunt-gh-pages A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth part of the url. In module versions < 0.9.1 the auth portion… CWE-255
CWE-532
Credentials Management
 Inclusion of Sensitive Information in Log Files 		CVE-2016-10526 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266448 8.2 HIGH
Network 		i18n-node-angular_project i18n-node-angular i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not … CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-10524 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266449 7.5 HIGH
Network 		mqtt-packet_project mqtt-packet MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10523 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
266450 7.5 HIGH
Network 		jshamcrest_project jshamcrest jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress validator. CWE-20
 Improper Input Validation  		CVE-2016-10521 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm