Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253161 6.8 警告 MantisBT Group - MantisBT の bug_actiongroup_ext_page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-3357 2011-09-27 11:17 2011-08-31 Show GitHub Exploit DB Packet Storm
253162 4.3 警告 MantisBT Group - MantisBT の filter_api.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2938 2011-09-27 11:15 2011-08-18 Show GitHub Exploit DB Packet Storm
253163 4.3 警告 MantisBT Group - MantisBT の config_defaults_inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3356 2011-09-27 11:12 2011-07-31 Show GitHub Exploit DB Packet Storm
253164 10 危険 シスコシステムズ - Cisco Identity Services Engine における設定を変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-3290 2011-09-27 11:07 2011-09-20 Show GitHub Exploit DB Packet Storm
253165 4.3 警告 Roundcube.net - Roundcube Webmail の UI メッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2937 2011-09-27 11:05 2011-08-9 Show GitHub Exploit DB Packet Storm
253166 6.8 警告 AmmSoft - AmmSoft ScriptFTP にバッファオーバーフローの脆弱性 - CVE-2011-3976 2011-09-27 10:58 2011-09-21 Show GitHub Exploit DB Packet Storm
253167 10 危険 Measuresoft Development Ltd. - Measuresoft ScadaPro の service.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3490 2011-09-26 15:59 2011-09-16 Show GitHub Exploit DB Packet Storm
253168 4.6 警告 レッドハット - Red Hat Enterprise MRG の Cumin における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-2925 2011-09-26 15:43 2011-09-7 Show GitHub Exploit DB Packet Storm
253169 5 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の encryptPassword 関数における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-1509 2011-09-26 15:42 2011-09-20 Show GitHub Exploit DB Packet Storm
253170 4.3 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の SolutionSearch.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1510 2011-09-26 15:41 2011-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264871 7.8 HIGH
Local
readydesk readydesk ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file. NVD-CWE-Other
CVE-2016-5683 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
264872 4.3 MEDIUM
Network
accellion kiteworks_appliance Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI. CWE-22
Path Traversal
CVE-2016-5664 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
264873 6.1 MEDIUM
Network
accellion kiteworks_appliance Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (… CWE-79
Cross-site Scripting
CVE-2016-5663 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
264874 7.8 HIGH
Local
accellion kiteworks_appliance Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors. NVD-CWE-Other
CVE-2016-5662 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
264875 8.8 HIGH
Network
redhat cloudforms The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters." CWE-284
Improper Access Control
CVE-2016-5383 2024-11-21 11:54 2016-08-26 Show GitHub Exploit DB Packet Storm
264876 7.5 HIGH
Network
ultravnc repeater UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP addre… CWE-284
Improper Access Control
CVE-2016-5673 2024-11-21 11:54 2016-08-26 Show GitHub Exploit DB Packet Storm
264877 9.8 CRITICAL
Network
dlink
d-link
dir-868l_firmware
dir-822_firmware
dir-880l_firmware
dir-850l_firmare
dir-895l_firmware
dir-817l\(w\)_firmware
dir-818l\(w\)_firmware
dir-890l_firmware
dir-823_firmware
dir…
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00W… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-5681 2024-11-21 11:54 2016-08-26 Show GitHub Exploit DB Packet Storm
264878 7.5 HIGH
Network
zmodo zp-ibh-13w
zp-ne-14-s
ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID valu… CWE-284
Improper Access Control
CVE-2016-5650 2024-11-21 11:54 2016-08-24 Show GitHub Exploit DB Packet Storm
264879 7.3 HIGH
Network
rockwellautomation 1766-l32bxb
1766-l32bwaa
1766-l32awaa
1766-l32bwa
1766-l32awa
1766-l32bxba
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote a… CWE-284
Improper Access Control
CVE-2016-5645 2024-11-21 11:54 2016-08-24 Show GitHub Exploit DB Packet Storm
264880 5.3 MEDIUM
Network
theforeman foreman Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via a request to A… CWE-200
Information Exposure
CVE-2016-5390 2024-11-21 11:54 2016-08-20 Show GitHub Exploit DB Packet Storm