Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209171	4	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Server : InnoDB : DDL : Foreign Key に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-0432	2015-11-6 15:43	2015-01-20	Show	GitHub Exploit DB Packet Storm

209172	7.5	危険	TigerVNC	-	TigerVNC における整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-8240	2015-11-6 15:43	2014-10-16	Show	GitHub Exploit DB Packet Storm

209173	4	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における SERVER:CHARACTER SETS に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4287	2015-11-6 15:43	2014-10-14	Show	GitHub Exploit DB Packet Storm

209174	3.3	注意	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における SERVER:REPLICATION ROW FORMAT BINARY LOG DML に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6463	2015-11-6 15:43	2014-10-14	Show	GitHub Exploit DB Packet Storm

209175	4.1	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における SERVER:MyISAM に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4274	2015-11-6 15:43	2014-10-14	Show	GitHub Exploit DB Packet Storm

209176	4	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における SERVER:INNODB DML FOREIGN KEYS に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6464	2015-11-6 15:43	2014-10-14	Show	GitHub Exploit DB Packet Storm

209177	6.8	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における SERVER:OPTIMIZER に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6469	2015-11-6 15:43	2014-10-14	Show	GitHub Exploit DB Packet Storm

209178	7.5	危険	LibVNC	-	LibVNCServer の vncviewer.c の MallocFrameBuffer 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2014-6051	2015-11-6 15:43	2014-08-15	Show	GitHub Exploit DB Packet Storm

209179	5.5	警告	オラクル	-	Oracle MySQL の MySQL Server における SRCHAR に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4260	2015-11-6 15:43	2014-07-15	Show	GitHub Exploit DB Packet Storm

209180	4.3	警告	Haxx アップルオラクル	-	libcurl における CRLF インジェクションの脆弱性	CWE-Other その他	CVE-2014-8150	2015-11-6 15:34	2014-10-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297671	-	rockwellautomation	guardlogix_controllers compactlogix_controllers 1794-aentr_flex_i\/o_ethernet\/ip_adapter flexlogix_1788-enbt_adapter micrologix guardlogix 1768-enbt 1756-enbt compactlogix	Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/…	CWE-287 Improper Authentication	CVE-2012-6437	2024-11-21 10:46	2013-01-25	Show	GitHub Exploit DB Packet Storm

297672	-	rockwellautomation	guardlogix_controllers compactlogix_controllers 1794-aentr_flex_i\/o_ethernet\/ip_adapter flexlogix_1788-enbt_adapter micrologix guardlogix 1768-enbt 1756-enbt compactlogix	Buffer overflow in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter;…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6436	2024-11-21 10:46	2013-01-25	Show	GitHub Exploit DB Packet Storm

297673	-	elefantcms	elefantcms	Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions.	CWE-79 Cross-site Scripting	CVE-2012-6521	2024-11-21 10:46	2013-01-24	Show	GitHub Exploit DB Packet Storm

297674	-	wikidforum	wikidforum	Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. …	CWE-89 SQL Injection	CVE-2012-6520	2024-11-21 10:46	2013-01-24	Show	GitHub Exploit DB Packet Storm

297675	-	diy-cms	diy-cms	SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php.	CWE-89 SQL Injection	CVE-2012-6519	2024-11-21 10:46	2013-01-24	Show	GitHub Exploit DB Packet Storm

297676	-	diy-cms	diy-cms	Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to t…	CWE-352 Origin Validation Error	CVE-2012-6518	2024-11-21 10:46	2013-01-24	Show	GitHub Exploit DB Packet Storm

297677	-	diy-cms	diy-cms	Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) question parameter to in /modules/poll/add.php or (2) ques…	CWE-79 Cross-site Scripting	CVE-2012-6517	2024-11-21 10:46	2013-01-24	Show	GitHub Exploit DB Packet Storm

297678	-	shawn_bradley	php_ticket_system	SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via the q parameter to index.php.	CWE-89 SQL Injection	CVE-2012-6516	2024-11-21 10:46	2013-01-24	Show	GitHub Exploit DB Packet Storm

297679	-	rockwellautomation	guardlogix_controllers compactlogix_controllers 1794-aentr_flex_i\/o_ethernet\/ip_adapter flexlogix_1788-enbt_adapter micrologix guardlogix 1768-enbt 1756-enbt compactlogix	Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/…	CWE-399 Resource Management Errors	CVE-2012-6435	2024-11-21 10:46	2013-01-25	Show	GitHub Exploit DB Packet Storm

297680	-	efrontlearning	efront	eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info module to index.php, which reveals the insta…	CWE-200 Information Exposure	CVE-2012-6515	2024-11-21 10:46	2013-01-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed