Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252571 4.3 警告 IBM - IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2748 2011-11-7 15:14 2009-10-24 Show GitHub Exploit DB Packet Storm
252572 7.2 危険 Google - Google App Engine Python SDK の sandbox 環境におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4213 2011-11-7 09:51 2011-10-30 Show GitHub Exploit DB Packet Storm
252573 7.2 危険 Google - Google App Engine Python SDK の sandbox 環境におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4212 2011-11-7 09:50 2011-10-30 Show GitHub Exploit DB Packet Storm
252574 7.2 危険 Google - Google App Engine Python SDK の sandbox 環境におけるアクセス制限を回避される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-4211 2011-11-7 09:49 2011-10-30 Show GitHub Exploit DB Packet Storm
252575 6.8 警告 Google - Google App Engine Python SDK の SDK Console におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1364 2011-11-7 09:48 2011-10-30 Show GitHub Exploit DB Packet Storm
252576 5 警告 IBM - IBM WebSphere Application Server (WAS) における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2747 2011-11-7 09:46 2009-10-24 Show GitHub Exploit DB Packet Storm
252577 5 警告 IBM - IBM Lotus Sametime における構成設定の情報を読まれる脆弱性 CWE-16
環境設定
CVE-2011-1370 2011-11-7 09:46 2011-10-29 Show GitHub Exploit DB Packet Storm
252578 5 警告 IBM - IBM WebSphere Application Server におけるファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-1368 2011-11-7 09:45 2011-10-29 Show GitHub Exploit DB Packet Storm
252579 4.3 警告 IBM - IBM WebSphere MQ におけるサービス運用妨害 (ディスク消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0780 2011-11-7 09:44 2011-10-29 Show GitHub Exploit DB Packet Storm
252580 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) player の ATAS32 の処理機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4004 2011-11-4 15:14 2011-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265261 7.8 HIGH
Local
apple mac_os_x Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4647 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265262 6.5 MEDIUM
Network
apple mac_os_x Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted audio file. CWE-200
Information Exposure
CVE-2016-4646 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265263 3.3 LOW
Local
apple mac_os_x CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, which allows local users to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure
CVE-2016-4645 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265264 7.3 HIGH
Local
apple mac_os_x Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion." CWE-20
 Improper Input Validation 
CVE-2016-4641 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265265 7.8 HIGH
Local
apple mac_os_x Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4640 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265266 7.0 HIGH
Local
apple mac_os_x Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors. NVD-CWE-noinfo
CVE-2016-4639 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265267 7.8 HIGH
Local
apple mac_os_x Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion." CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-4638 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265268 8.8 HIGH
Network
apple iphone_os
tvos
mac_os_x
watchos
CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4637 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265269 5.3 MEDIUM
Network
apple iphone_os
mac_os_x
FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances,… CWE-200
Information Exposure
CVE-2016-4635 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm
265270 7.8 HIGH
Local
apple mac_os_x The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4634 2024-11-21 11:52 2016-07-22 Show GitHub Exploit DB Packet Storm