Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252801 3.5 注意 Barter Sites - Joomla! 用 Barter Sites の com_listing コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4830 2011-12-19 11:51 2011-12-15 Show GitHub Exploit DB Packet Storm
252802 7.5 危険 Barter Sites - Joomla! 用 Barter Sites の com_listing コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4829 2011-12-19 11:50 2011-12-15 Show GitHub Exploit DB Packet Storm
252803 7.5 危険 AutoSec Tools - AutoSec Tools V-CMS のファイルアップロードにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4828 2011-12-19 11:49 2011-11-27 Show GitHub Exploit DB Packet Storm
252804 4.3 警告 AutoSec Tools - AutoSec Tools V-CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4827 2011-12-19 11:39 2011-12-15 Show GitHub Exploit DB Packet Storm
252805 6.8 警告 AutoSec Tools - AutoSec Tools V-CMS の session.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4826 2011-12-19 11:30 2011-12-15 Show GitHub Exploit DB Packet Storm
252806 4.3 警告 Google - Google Chrome のソースビュー機能における URL バーを偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3907 2011-12-16 16:12 2011-12-13 Show GitHub Exploit DB Packet Storm
252807 7.5 危険 Google - Google Chrome の FileWatcher におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3917 2011-12-16 16:08 2011-12-13 Show GitHub Exploit DB Packet Storm
252808 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3916 2011-12-16 16:07 2011-12-13 Show GitHub Exploit DB Packet Storm
252809 7.5 危険 Google - Google Chrome におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3915 2011-12-16 16:06 2011-12-13 Show GitHub Exploit DB Packet Storm
252810 7.5 危険 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3914 2011-12-16 16:05 2011-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264721 7.5 HIGH
Network 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificat… CWE-295
Improper Certificate Validation  		CVE-2016-8231 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264722 7.5 HIGH
Network 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers. CWE-200
Information Exposure 		CVE-2016-8230 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264723 8.8 HIGH
Network 		lenovo lenovo_service_bridge A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed. CWE-352
 Origin Validation Error 		CVE-2016-8229 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264724 7.8 HIGH
Local 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8228 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264725 7.5 HIGH
Network 		apache qpid_broker-j The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication. Among the choices are the SCRAM-SHA-1 and SCRAM-SHA-256 Authenticat… CWE-200
Information Exposure 		CVE-2016-8741 2024-11-21 11:59 2017-05-15 Show GitHub Exploit DB Packet Storm
264726 9.1 CRITICAL
Network 		linuxcontainers lxc lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's f… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8649 2024-11-21 11:59 2017-05-1 Show GitHub Exploit DB Packet Storm
264727 8.8 HIGH
Network 		trendmicro threat_discovery_appliance Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a .. (dot dot) in the … CWE-22
Path Traversal 		CVE-2016-8593 2024-11-21 11:59 2017-04-29 Show GitHub Exploit DB Packet Storm
264728 8.8 HIGH
Network 		trendmicro threat_discovery_appliance log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cach… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8592 2024-11-21 11:59 2017-04-29 Show GitHub Exploit DB Packet Storm
264729 8.8 HIGH
Network 		trendmicro threat_discovery_appliance log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cache_id pa… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8591 2024-11-21 11:59 2017-04-29 Show GitHub Exploit DB Packet Storm
264730 8.8 HIGH
Network 		trendmicro threat_discovery_appliance log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cache_i… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8590 2024-11-21 11:59 2017-04-29 Show GitHub Exploit DB Packet Storm