Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256511 6.8 警告 LibTIFF
レッドハット
- LibTIFF の OJPEG デコーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-5022 2011-05-11 10:50 2011-04-18 Show GitHub Exploit DB Packet Storm
256512 2.6 注意 株式会社ロックオン - EC-CUBE におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1325 2011-05-10 11:01 2011-05-10 Show GitHub Exploit DB Packet Storm
256513 4 警告 バッファロー - 複数のバッファロー社製ルータにおけるクロスサイト・リクエスト・フォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1324 2011-05-10 10:55 2011-04-19 Show GitHub Exploit DB Packet Storm
256514 6.8 警告 Mutt
オラクル
- mutt の mutt_ssl.c における SSH サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2009-3765 2011-05-10 10:49 2009-10-23 Show GitHub Exploit DB Packet Storm
256515 9.3 危険 オラクル
Erik de Castro Lopo
Nullsoft
- Winamp などで利用される libsndfile の aiff_read_header におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1791 2011-05-10 10:49 2009-05-26 Show GitHub Exploit DB Packet Storm
256516 9.3 危険 オラクル
Erik de Castro Lopo
Nullsoft
- Winamp などで利用される libsndfile の voc_read_header におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1788 2011-05-10 10:48 2009-05-26 Show GitHub Exploit DB Packet Storm
256517 9.3 危険 オラクル
Erik de Castro Lopo
Nullsoft
- Winamp などで利用される libsndfile における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-0186 2011-05-10 10:47 2009-03-5 Show GitHub Exploit DB Packet Storm
256518 - - アップル - Apple Mac OS X における脆弱性に対するアップデート - - 2011-05-10 10:46 2011-04-15 Show GitHub Exploit DB Packet Storm
256519 10 危険 BlackBerry
アップル
Google
- WebKit における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2011-1290 2011-05-10 10:43 2011-03-11 Show GitHub Exploit DB Packet Storm
256520 10 危険 MIT Kerberos
レッドハット
- MIT Kerberos 5 の process_chpw_request 関数における任意のコードを実行される脆弱性 CWE-20
CWE-Other
CVE-2011-0285 2011-05-10 10:40 2011-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267961 7.0 HIGH
Local
schneider-electric unity_pro An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instru… CWE-94
Code Injection
CVE-2016-8354 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267962 6.4 MEDIUM
Network
osisoft pi_web_api_2015_r2 An issue was discovered in OSIsoft PI Web API 2015 R2 (Version 1.5.1). There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-8353 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267963 10.0 CRITICAL
Network
schneider-electric connexium_firmware An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 all versions, TCSEFEC23FCF21 all versions, and TCSEFEC2CF3F2… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-8352 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267964 6.3 MEDIUM
Network
moxa iologik_e1200_series_firmware
iologik_e2200_series_firmware
An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware… CWE-352
 Origin Validation Error
CVE-2016-8350 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267965 9.8 CRITICAL
Network
emerson liebert_sitescan_web An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML par… CWE-611
XXE
CVE-2016-8348 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267966 9.8 CRITICAL
Network
kabona_ab webdatorcentral An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. WDC does not limit authentication attempts that may allow a brute force attack method. CWE-287
Improper Authentication
CVE-2016-8347 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267967 7.5 HIGH
Network
moxa edr-810_firmware An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access configuration and log fi… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2016-8346 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267968 3.7 LOW
Network
honeywell experion_process_knowledge_system An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release… CWE-20
 Improper Input Validation 
CVE-2016-8344 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267969 9.8 CRITICAL
Network
ecava integraxor An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's databa… CWE-89
SQL Injection
CVE-2016-8341 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm
267970 7.0 HIGH
Local
bubblewrap_project bubblewrap Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-8659 2024-11-21 11:59 2017-02-14 Show GitHub Exploit DB Packet Storm