Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253451 3.5 注意 LightNEasy - LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3978 2011-10-11 10:15 2011-10-4 Show GitHub Exploit DB Packet Storm
253452 7.2 危険 NoMachine - NoMachine NX Node および NX Server の nxconfigure.sh における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2011-3977 2011-10-11 10:13 2011-08-5 Show GitHub Exploit DB Packet Storm
253453 5 警告 IceWarp, Inc. - IceWarp Mail Server の IceWarp WebMail における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3580 2011-10-11 10:11 2011-09-30 Show GitHub Exploit DB Packet Storm
253454 6.4 警告 IceWarp, Inc. - IceWarp Mail Server の server/webmail.php における任意のファイルを読まれる脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3579 2011-10-11 10:10 2011-09-30 Show GitHub Exploit DB Packet Storm
253455 7.5 危険 シマンテック - Symantec IM Manager の管理コンソールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0554 2011-10-11 10:10 2011-09-29 Show GitHub Exploit DB Packet Storm
253456 7.5 危険 シマンテック - Symantec IM Manager の管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0553 2011-10-11 10:09 2011-09-29 Show GitHub Exploit DB Packet Storm
253457 4.3 警告 シマンテック - Symantec IM Manager の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0552 2011-10-11 10:09 2011-09-29 Show GitHub Exploit DB Packet Storm
253458 4 警告 株式会社アークウェブ - A-Form におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2676 2011-10-7 12:04 2011-10-7 Show GitHub Exploit DB Packet Storm
253459 5 警告 utage.org - 宴会くんにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2675 2011-10-7 12:03 2011-10-7 Show GitHub Exploit DB Packet Storm
253460 2.6 注意 HTC Corporation - 複数の Android 用 HTC 製品における電話番号およびその他の重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3975 2011-10-7 11:46 2011-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264581 10.0 CRITICAL
Network 		vmware vrealize_operations VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-7457 2024-11-21 11:58 2016-12-29 Show GitHub Exploit DB Packet Storm
264582 9.8 CRITICAL
Network 		vmware vsphere_data_protection VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session. CWE-255
Credentials Management 		CVE-2016-7456 2024-11-21 11:58 2016-12-29 Show GitHub Exploit DB Packet Storm
264583 6.5 MEDIUM
Network 		kde kmail KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code was executed. CWE-94
Code Injection 		CVE-2016-7968 2024-11-21 11:58 2016-12-24 Show GitHub Exploit DB Packet Storm
264584 8.1 HIGH
Network 		kde kmail KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URL… CWE-94
CWE-284
Code Injection
Improper Access Control 		CVE-2016-7967 2024-11-21 11:58 2016-12-24 Show GitHub Exploit DB Packet Storm
264585 7.3 HIGH
Network 		kde
debian
fedoraproject
suse 		kmail
debian_linux
fedora
linux_enterprise 		Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal si… CWE-94
Code Injection 		CVE-2016-7966 2024-11-21 11:58 2016-12-24 Show GitHub Exploit DB Packet Storm
264586 4.9 MEDIUM
Network 		kde
opensuse 		kde-cli-tools
leap
opensuse 		A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user. CWE-94
Code Injection 		CVE-2016-7787 2024-11-21 11:58 2016-12-24 Show GitHub Exploit DB Packet Storm
264587 5.5 MEDIUM
Local 		ffmpeg ffmpeg The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (NULL pointer used) via a crafted AVI file. CWE-476
 NULL Pointer Dereference 		CVE-2016-7905 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
264588 5.5 MEDIUM
Local 		ffmpeg ffmpeg The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI file. CWE-20
 Improper Input Validation  		CVE-2016-7785 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
264589 5.5 MEDIUM
Local 		ffmpeg ffmpeg The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer overflow) via a crafted AVI file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7562 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
264590 5.5 MEDIUM
Local 		ffmpeg ffmpeg The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure. CWE-200
Information Exposure 		CVE-2016-7555 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm