Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252691	7.5	危険	シマンテック	-	Symantec IM Manager の管理コンソールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0554	2011-10-11 10:10	2011-09-29	Show	GitHub Exploit DB Packet Storm

252692	7.5	危険	シマンテック	-	Symantec IM Manager の管理コンソールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0553	2011-10-11 10:09	2011-09-29	Show	GitHub Exploit DB Packet Storm

252693	4.3	警告	シマンテック	-	Symantec IM Manager の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0552	2011-10-11 10:09	2011-09-29	Show	GitHub Exploit DB Packet Storm

252694	4	警告	株式会社アークウェブ	-	A-Form におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2676	2011-10-7 12:04	2011-10-7	Show	GitHub Exploit DB Packet Storm

252695	5	警告	utage.org	-	宴会くんにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2675	2011-10-7 12:03	2011-10-7	Show	GitHub Exploit DB Packet Storm

252696	2.6	注意	HTC Corporation	-	複数の Android 用 HTC 製品における電話番号およびその他の重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3975	2011-10-7 11:46	2011-10-3	Show	GitHub Exploit DB Packet Storm

252697	5	警告	FFmpeg	-	FFmpeg の decode_residual_inter 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3974	2011-10-7 11:33	2011-10-2	Show	GitHub Exploit DB Packet Storm

252698	4.3	警告	PunBB	-	PunBB の include/functions.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3371	2011-10-7 11:29	2011-10-2	Show	GitHub Exploit DB Packet Storm

252699	9	危険	ヒューレット・パッカード	-	HP NonStop Servers における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2411	2011-10-7 11:26	2011-09-19	Show	GitHub Exploit DB Packet Storm

252700	4.3	警告	TWiki	-	TWiki におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3010	2011-10-7 11:20	2011-09-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265231	7.8	HIGH Local	apple	mac_os_x	Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4697	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265232	7.8	HIGH Local	apple	mac_os_x	AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.	CWE-476 NULL Pointer Dereference	CVE-2016-4696	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265233	9.1	CRITICAL Network	apple	mac_os_x os_x_server	The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data…	CWE-284 Improper Access Control	CVE-2016-4694	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265234	9.8	CRITICAL Network	apple xmlsoft	watchos tvos iphone_os mac_os_x libxml2	xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, wh…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4658	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265235	6.1	MEDIUM Network	apple	safari iphone_os	Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Unive…	CWE-79 Cross-site Scripting	CVE-2016-4618	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265236	8.8	HIGH Network	apple	tvos iphone_os safari	WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differ…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4611	2024-11-21 11:52	2016-09-25	Show	GitHub Exploit DB Packet Storm

265237	9.8	CRITICAL Network	apache	cxf_fediz	The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers…	CWE-284 Improper Access Control	CVE-2016-4464	2024-11-21 11:52	2016-09-22	Show	GitHub Exploit DB Packet Storm

265238	8.6	HIGH Network	hp	performance_center loadrunner	HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-4384	2024-11-21 11:52	2016-09-21	Show	GitHub Exploit DB Packet Storm

265239	7.5	HIGH Local	trane	tracer_sc	ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.	CWE-427 Uncontrolled Search Path Element	CVE-2016-4526	2024-11-21 11:52	2016-09-19	Show	GitHub Exploit DB Packet Storm

265240	3.3	LOW Local	apple	iphone_os	Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file.	CWE-200 Information Exposure	CVE-2016-4749	2024-11-21 11:52	2016-09-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed