Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254081 4.3 警告 Apache Software Foundation
Steinar H. Gunderson		 - Steinar H. Gunderson mpm-itk Multi-Processing Module における権限を取得される脆弱性 CWE-16
環境設定 		CVE-2011-1176 2011-05-19 11:04 2011-03-29 Show GitHub Exploit DB Packet Storm
254082 4.9 警告 IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
ヒューレット・パッカード
ターボリナックス
オラクル
レッドハット		 - Apache HTTP Server における AllowOverride ディレクティブの処理に関する権限昇格の脆弱性 CWE-16
環境設定 		CVE-2009-1195 2011-05-19 09:46 2009-05-28 Show GitHub Exploit DB Packet Storm
254083 4.3 警告 KDE project
レッドハット		 - KDE SC の Konqueror 内にある KHTMLPart::htmlError 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1168 2011-05-18 18:30 2011-04-21 Show GitHub Exploit DB Packet Storm
254084 4.3 警告 KDE project
レッドハット		 - kdelibs の kio/kio/tcpslavebase.cpp における任意の SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1094 2011-05-18 18:26 2011-04-21 Show GitHub Exploit DB Packet Storm
254085 5.8 警告 KDE project
レッドハット		 - KDE SC の KGet 内にある KGetMetalink::File::isValidNameAttr 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1586 2011-05-18 18:25 2011-04-21 Show GitHub Exploit DB Packet Storm
254086 9.3 危険 アドビシステムズ - 複数の Adobe 製品の CoolType ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0610 2011-05-18 18:24 2011-04-21 Show GitHub Exploit DB Packet Storm
254087 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0861 2011-05-18 18:23 2011-04-19 Show GitHub Exploit DB Packet Storm
254088 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll - Spain に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0860 2011-05-18 18:21 2011-04-19 Show GitHub Exploit DB Packet Storm
254089 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
CWE-noinfo
CVE-2010-3777 2011-05-18 10:37 2010-12-9 Show GitHub Exploit DB Packet Storm
254090 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-119
CWE-noinfo
CVE-2010-3776 2011-05-18 10:35 2010-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264971 8.1 HIGH
Network 		oracle
fedoraproject
hp
php
redhat
debian
opensuse
drupal 		enterprise_manager_ops_center
communications_user_data_repository
linux
fedora
storeever_msl6480_tape_library_firmware
system_management_homepage
php
enterprise_linux_desktop
… 		PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY envi… CWE-601
Open Redirect 		CVE-2016-5385 2024-11-21 11:54 2016-07-19 Show GitHub Exploit DB Packet Storm
264972 8.8 HIGH
Network 		accela civic_platform_citizen_access_portal Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and … CWE-284
Improper Access Control 		CVE-2016-5661 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm
264973 6.1 MEDIUM
Network 		accela civic_platform Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid paramet… CWE-79
Cross-site Scripting 		CVE-2016-5660 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm
264974 8.8 HIGH
Network 		libbpg_project libbpg The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5637 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm
264975 5.5 MEDIUM
Local 		symantec client_intrusion_detection_system The Client Intrusion Detection System (CIDS) driver before 15.0.6 in Symantec Endpoint Protection (SEP) and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service (memo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5308 2024-11-21 11:54 2016-07-12 Show GitHub Exploit DB Packet Storm
264976 7.5 HIGH
Network 		opensuse
phpmyadmin 		leap
opensuse
phpmyadmin 		The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, … CWE-200
Information Exposure 		CVE-2016-5739 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
264977 9.8 CRITICAL
Network 		phpmyadmin phpmyadmin phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote… CWE-94
Code Injection 		CVE-2016-5734 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
264978 6.1 MEDIUM
Network 		phpmyadmin
opensuse 		phpmyadmin
leap
opensuse 		Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2016-5733 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
264979 6.1 MEDIUM
Network 		phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before … CWE-79
Cross-site Scripting 		CVE-2016-5732 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
264980 6.1 MEDIUM
Network 		phpmyadmin
opensuse 		phpmyadmin
leap
opensuse 		Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web scr… CWE-79
Cross-site Scripting 		CVE-2016-5731 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm