Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253241 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2991 2011-09-5 10:51 2011-08-16 Show GitHub Exploit DB Packet Storm
253242 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2989 2011-09-5 10:39 2011-08-16 Show GitHub Exploit DB Packet Storm
253243 6.9 警告 サイバートラスト株式会社
シトリックス・システムズ
レッドハット		 - Xen の tools/libxc/xc_dom_bzimageloader.c における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-1583 2011-09-2 14:27 2011-05-9 Show GitHub Exploit DB Packet Storm
253244 7.8 危険 ISC, Inc.
レッドハット		 - ISC DHCP サーバにおけるサービス運用妨害 (dhcp デーモンの停止) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2749 2011-09-2 14:26 2011-07-27 Show GitHub Exploit DB Packet Storm
253245 6.8 警告 GTK+ - GTK+ における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-4831 2011-09-2 12:04 2011-09-2 Show GitHub Exploit DB Packet Storm
253246 4.3 警告 ジュニパーネットワークス - Juniper Networks IDP ACM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-5086 2011-09-2 12:03 2011-09-2 Show GitHub Exploit DB Packet Storm
253247 5.8 警告 Sage - Sage において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4102 2011-09-2 12:03 2011-09-2 Show GitHub Exploit DB Packet Storm
253248 5.8 警告 Sage - Sage において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3384 2011-09-2 12:03 2011-09-2 Show GitHub Exploit DB Packet Storm
253249 2.6 注意 Phorum - Phorum における複数の脆弱性 CWE-352
CWE-79
CVE-2011-3381
CVE-2011-3382 		2011-09-2 12:00 2011-09-2 Show GitHub Exploit DB Packet Storm
253250 5 警告 アドビシステムズ - Adobe Flash Media Server におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2132 2011-09-1 10:55 2011-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264951 8.1 HIGH
Network 		juniper junos_space Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices. CWE-20
 Improper Input Validation  		CVE-2016-4927 2024-11-21 11:53 2017-03-21 Show GitHub Exploit DB Packet Storm
264952 9.8 CRITICAL
Network 		juniper junos_space Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authe… CWE-287
Improper Authentication 		CVE-2016-4926 2024-11-21 11:53 2017-03-21 Show GitHub Exploit DB Packet Storm
264953 9.8 CRITICAL
Network 		imagemagick imagemagick The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-5239 2024-11-21 11:53 2017-03-16 Show GitHub Exploit DB Packet Storm
264954 7.5 HIGH
Network 		cloudera manager Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions. CWE-200
Information Exposure 		CVE-2016-4950 2024-11-21 11:53 2017-03-8 Show GitHub Exploit DB Packet Storm
264955 7.5 HIGH
Network 		cloudera manager Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to /cmf/process/<process_id>/logs. CWE-200
Information Exposure 		CVE-2016-4949 2024-11-21 11:53 2017-03-8 Show GitHub Exploit DB Packet Storm
264956 6.1 MEDIUM
Network 		cloudera manager Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Template Name field when renaming a t… CWE-79
Cross-site Scripting 		CVE-2016-4948 2024-11-21 11:53 2017-03-8 Show GitHub Exploit DB Packet Storm
264957 5.3 MEDIUM
Network 		cloudera hue Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete. CWE-200
Information Exposure 		CVE-2016-4947 2024-11-21 11:53 2017-03-8 Show GitHub Exploit DB Packet Storm
264958 6.1 MEDIUM
Network 		cloudera hue Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name or (2) Last name field in th… CWE-79
Cross-site Scripting 		CVE-2016-4946 2024-11-21 11:53 2017-03-8 Show GitHub Exploit DB Packet Storm
264959 5.5 MEDIUM
Local 		graphicsmagick graphicsmagick The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a… CWE-20
 Improper Input Validation  		CVE-2016-5240 2024-11-21 11:53 2017-02-28 Show GitHub Exploit DB Packet Storm
264960 5.5 MEDIUM
Local 		libdwarf_project libdwarf dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file. CWE-476
 NULL Pointer Dereference 		CVE-2016-5027 2024-11-21 11:53 2017-02-25 Show GitHub Exploit DB Packet Storm