Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253381	9.3	危険	Investintech.com Inc.	-	Investintech.com の SlimPDF Reader におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4218	2011-11-10 16:31	2011-11-1	Show	GitHub Exploit DB Packet Storm

253382	9.3	危険	Investintech.com Inc.	-	Investintech.com の SlimPDF Reader におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4217	2011-11-10 16:31	2011-11-1	Show	GitHub Exploit DB Packet Storm

253383	9.3	危険	Investintech.com Inc.	-	Investintech.com の SlimPDF Reader におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4216	2011-11-10 16:30	2011-11-1	Show	GitHub Exploit DB Packet Storm

253384	7.5	危険	OneOrZero	-	OneOrZero Action & Information Management System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4215	2011-11-10 16:30	2011-11-1	Show	GitHub Exploit DB Packet Storm

253385	10	危険	OneOrZero	-	OneOrZero Action & Information Management System における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-4214	2011-11-10 16:29	2011-11-1	Show	GitHub Exploit DB Packet Storm

253386	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin のセットアップインターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4064	2011-11-10 16:29	2011-10-17	Show	GitHub Exploit DB Packet Storm

253387	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager および Cisco IOS におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2011-0941	2011-11-10 16:28	2011-09-28	Show	GitHub Exploit DB Packet Storm

253388	5	警告	Roundcube.net	-	Roundcube Webmail の include/iniset.php におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4078	2011-11-10 16:27	2011-11-3	Show	GitHub Exploit DB Packet Storm

253389	7.5	危険	The PHP Group	-	PHP の is_a 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3379	2011-11-10 16:27	2011-08-22	Show	GitHub Exploit DB Packet Storm

253390	7.5	危険	SIR	-	Gnuboard の bbs/tb.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4066	2011-11-10 16:26	2011-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264461	8.1	HIGH Network	oracle	flexcube_universal_banking	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.…	CWE-284 Improper Access Control	CVE-2016-8297	2024-11-21 11:59	2017-01-28	Show	GitHub Exploit DB Packet Storm

264462	6.1	MEDIUM Network	oracle	flexcube_private_banking	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2…	CWE-284 Improper Access Control	CVE-2016-8282	2024-11-21 11:59	2017-01-28	Show	GitHub Exploit DB Packet Storm

264463	5.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8644	2024-11-21 11:59	2017-01-20	Show	GitHub Exploit DB Packet Storm

264464	4.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.	CWE-284 Improper Access Control	CVE-2016-8643	2024-11-21 11:59	2017-01-20	Show	GitHub Exploit DB Packet Storm

264465	5.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.	CWE-284 Improper Access Control	CVE-2016-8642	2024-11-21 11:59	2017-01-20	Show	GitHub Exploit DB Packet Storm

264466	5.9	MEDIUM Network	matrixssl	matrixssl	The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: …	CWE-200 Information Exposure	CVE-2016-8671	2024-11-21 11:59	2017-01-14	Show	GitHub Exploit DB Packet Storm

264467	5.5	MEDIUM Local	google	android	An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8467	2024-11-21 11:59	2017-01-14	Show	GitHub Exploit DB Packet Storm

264468	9.8	CRITICAL Network	gnu fedoraproject	guile fedora	The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.	CWE-284 Improper Access Control	CVE-2016-8606	2024-11-21 11:59	2017-01-13	Show	GitHub Exploit DB Packet Storm

264469	5.3	MEDIUM Network	fedoraproject gnu	fedora guile	The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permi…	CWE-275 Permission Issues	CVE-2016-8605	2024-11-21 11:59	2017-01-13	Show	GitHub Exploit DB Packet Storm

264470	7.0	HIGH Local	lenovo	xclarity_administrator	Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8221	2024-11-21 11:59	2017-01-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed