Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253451 3.5 注意 LightNEasy - LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3978 2011-10-11 10:15 2011-10-4 Show GitHub Exploit DB Packet Storm
253452 7.2 危険 NoMachine - NoMachine NX Node および NX Server の nxconfigure.sh における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2011-3977 2011-10-11 10:13 2011-08-5 Show GitHub Exploit DB Packet Storm
253453 5 警告 IceWarp, Inc. - IceWarp Mail Server の IceWarp WebMail における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3580 2011-10-11 10:11 2011-09-30 Show GitHub Exploit DB Packet Storm
253454 6.4 警告 IceWarp, Inc. - IceWarp Mail Server の server/webmail.php における任意のファイルを読まれる脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3579 2011-10-11 10:10 2011-09-30 Show GitHub Exploit DB Packet Storm
253455 7.5 危険 シマンテック - Symantec IM Manager の管理コンソールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0554 2011-10-11 10:10 2011-09-29 Show GitHub Exploit DB Packet Storm
253456 7.5 危険 シマンテック - Symantec IM Manager の管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0553 2011-10-11 10:09 2011-09-29 Show GitHub Exploit DB Packet Storm
253457 4.3 警告 シマンテック - Symantec IM Manager の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0552 2011-10-11 10:09 2011-09-29 Show GitHub Exploit DB Packet Storm
253458 4 警告 株式会社アークウェブ - A-Form におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2676 2011-10-7 12:04 2011-10-7 Show GitHub Exploit DB Packet Storm
253459 5 警告 utage.org - 宴会くんにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2675 2011-10-7 12:03 2011-10-7 Show GitHub Exploit DB Packet Storm
253460 2.6 注意 HTC Corporation - 複数の Android 用 HTC 製品における電話番号およびその他の重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3975 2011-10-7 11:46 2011-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264591 7.8 HIGH
Local 		ffmpeg ffmpeg The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode. CWE-125
Out-of-bounds Read 		CVE-2016-7502 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
264592 7.8 HIGH
Local 		ffmpeg ffmpeg The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file. CWE-125
Out-of-bounds Read 		CVE-2016-7450 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
264593 9.8 CRITICAL
Network 		bundler bundler Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334. CWE-94
Code Injection 		CVE-2016-7954 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
264594 8.0 HIGH
Adjacent 		technicolor xfinity_gateway_router_dpc3941t_firmware CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remo… CWE-352
 Origin Validation Error 		CVE-2016-7454 2024-11-21 11:58 2016-12-17 Show GitHub Exploit DB Packet Storm
264595 6.1 MEDIUM
Network 		adobe robohelp Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks. CWE-79
Cross-site Scripting 		CVE-2016-7891 2024-11-21 11:58 2016-12-15 Show GitHub Exploit DB Packet Storm
264596 8.8 HIGH
Network 		adobe flash_player_desktop_runtime
flash_player 		Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy. NVD-CWE-noinfo
CVE-2016-7890 2024-11-21 11:58 2016-12-15 Show GitHub Exploit DB Packet Storm
264597 7.5 HIGH
Network 		adobe digital_editions Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure. CWE-200
Information Exposure 		CVE-2016-7889 2024-11-21 11:58 2016-12-15 Show GitHub Exploit DB Packet Storm
264598 5.3 MEDIUM
Network 		adobe digital_editions Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak. CWE-200
Information Exposure 		CVE-2016-7888 2024-11-21 11:58 2016-12-15 Show GitHub Exploit DB Packet Storm
264599 7.5 HIGH
Network 		adobe coldfusion_builder Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to information disclosure. CWE-200
Information Exposure 		CVE-2016-7887 2024-11-21 11:58 2016-12-15 Show GitHub Exploit DB Packet Storm
264600 9.8 CRITICAL
Network 		adobe indesign
indesign_server 		Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7886 2024-11-21 11:58 2016-12-15 Show GitHub Exploit DB Packet Storm