Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253161	4.3	警告	ecoCMS	-	ecoCMS の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5046	2011-11-25 11:40	2011-11-23	Show	GitHub Exploit DB Packet Storm

253162	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5058	2011-11-25 10:14	2011-11-23	Show	GitHub Exploit DB Packet Storm

253163	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5057	2011-11-25 10:13	2011-11-23	Show	GitHub Exploit DB Packet Storm

253164	7.5	危険	IXXO Internet Solutions	-	XOBBIX コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5053	2011-11-25 10:08	2011-11-23	Show	GitHub Exploit DB Packet Storm

253165	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

253166	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

253167	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1516	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

253168	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7303	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

253169	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1452	2011-11-24 11:00	2010-07-25	Show	GitHub Exploit DB Packet Storm

253170	10	危険	トレンドマイクロ IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ターボリナックスオラクルレッドハット	-	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2412	2011-11-24 10:57	2009-08-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264371	6.5	MEDIUM Network	ibm	websphere_mq	IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running under the same process. IBM Reference #: 1998649.	CWE-284 Improper Access Control	CVE-2016-8915	2024-11-21 12:00	2017-02-23	Show	GitHub Exploit DB Packet Storm

264372	9.8	CRITICAL Network	aerospike	database_server	An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server to fetch a…	CWE-129 Improper Validation of Array Index	CVE-2016-9053	2024-11-21 12:00	2017-02-22	Show	GitHub Exploit DB Packet Storm

264373	9.8	CRITICAL Network	aerospike	database_server	An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-boun…	CWE-787 Out-of-bounds Write	CVE-2016-9051	2024-11-21 12:00	2017-02-22	Show	GitHub Exploit DB Packet Storm

264374	7.5	HIGH Network	aerospike	database_server	An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server process to dereference a nu…	CWE-476 NULL Pointer Dereference	CVE-2016-9049	2024-11-21 12:00	2017-02-22	Show	GitHub Exploit DB Packet Storm

264375	5.4	MEDIUM Network	trendmicro	interscan_web_security_virtual_appliance	Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Bu…	CWE-79 Cross-site Scripting	CVE-2016-9316	2024-11-21 12:00	2017-02-21	Show	GitHub Exploit DB Packet Storm

264376	8.8	HIGH Network	trendmicro	interscan_web_security_virtual_appliance	Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earli…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9315	2024-11-21 12:00	2017-02-21	Show	GitHub Exploit DB Packet Storm

264377	7.8	HIGH Local	trendmicro	interscan_web_security_virtual_appliance	Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authent…	CWE-200 Information Exposure	CVE-2016-9314	2024-11-21 12:00	2017-02-21	Show	GitHub Exploit DB Packet Storm

264378	9.9	CRITICAL Network	trendmicro	interscan_web_security_virtual_appliance	Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated,…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9269	2024-11-21 12:00	2017-02-21	Show	GitHub Exploit DB Packet Storm

264379	6.1	MEDIUM Network	otrs	otrs	Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject arbitrary web script …	CWE-79 Cross-site Scripting	CVE-2016-9139	2024-11-21 12:00	2017-02-17	Show	GitHub Exploit DB Packet Storm

264380	6.1	MEDIUM Network	ibm	websphere_message_broker integration_bus	IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could expl…	CWE-254 7PK - Security Features	CVE-2016-9010	2024-11-21 12:00	2017-02-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed