Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222691	4.3	警告	Opsview	-	Opsview におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-7254	2014-01-7 17:12	2013-12-23	Show	GitHub Exploit DB Packet Storm

222692	5	警告	BlogEngine.NET	-	BlogEngine.NET に情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2013-6953	2014-01-7 17:09	2014-01-2	Show	GitHub Exploit DB Packet Storm

222693	5	警告	fatfreecrm.com	-	Fat Free CRM における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-7249	2014-01-7 16:37	2013-12-27	Show	GitHub Exploit DB Packet Storm

222694	6.5	警告	fatfreecrm.com	-	Fat Free CRM の app/controllers/home_controller.rb における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-7225	2014-01-7 16:36	2013-12-27	Show	GitHub Exploit DB Packet Storm

222695	5	警告	fatfreecrm.com	-	Fat Free CRM における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-7224	2014-01-7 16:35	2013-12-27	Show	GitHub Exploit DB Packet Storm

222696	6.8	警告	fatfreecrm.com	-	Fat Free CRM におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-7223	2014-01-7 16:35	2013-12-27	Show	GitHub Exploit DB Packet Storm

222697	5	警告	fatfreecrm.com	-	Fat Free CRM の config/initializers/secret_token.rb における署名付き Cookie を偽装される脆弱性	CWE-310 暗号の問題	CVE-2013-7222	2014-01-7 16:34	2013-12-27	Show	GitHub Exploit DB Packet Storm

222698	6.8	警告	ProjectForge	-	ProjectForge におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-7251	2014-01-7 16:30	2013-12-30	Show	GitHub Exploit DB Packet Storm

222699	3.5	注意	ProjectForge	-	ProjectForge の JsonBuilder の実装におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-7250	2014-01-7 16:30	2013-12-5	Show	GitHub Exploit DB Packet Storm

222700	3.5	注意	ProjectForge	-	ProjectForge におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5269	2014-01-7 16:29	2011-02-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268231	6.1	MEDIUM Network	let\'s_php\!	simple_chat	Cross-site scripting (XSS) vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-4851	2024-11-21 11:53	2016-09-2	Show	GitHub Exploit DB Packet Storm

268232	6.1	MEDIUM Network	clip-bucket	clipbucket	Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-4848	2024-11-21 11:53	2016-09-2	Show	GitHub Exploit DB Packet Storm

268233	6.5	MEDIUM Network	netapp	oncommand_system_manager	NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5047	2024-11-21 11:53	2016-09-1	Show	GitHub Exploit DB Packet Storm

268234	9.8	CRITICAL Network	readydesk	readydesk	Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2016-5050	2024-11-21 11:53	2016-08-27	Show	GitHub Exploit DB Packet Storm

268235	7.5	HIGH Network	readydesk	readydesk	Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in …	CWE-22 Path Traversal	CVE-2016-5049	2024-11-21 11:53	2016-08-27	Show	GitHub Exploit DB Packet Storm

268236	9.8	CRITICAL Network	readydesk	readydesk	SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field.	CWE-89 SQL Injection	CVE-2016-5048	2024-11-21 11:53	2016-08-27	Show	GitHub Exploit DB Packet Storm

268237	7.5	HIGH Network	f5	big-ip_edge_gateway big-ip_protocol_security_module big-ip_analytics big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_domain_name_system big-ip_policy_enf…	Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote att…	CWE-284 Improper Access Control	CVE-2016-5023	2024-11-21 11:53	2016-08-26	Show	GitHub Exploit DB Packet Storm

268238	9.8	CRITICAL Network	zmodo	zp-ibh-13w zp-ne-14-s	ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root password, which makes it easier for remote attackers to obtain access via a TELNET session.	CWE-798 Use of Hard-coded Credentials	CVE-2016-5081	2024-11-21 11:53	2016-08-24	Show	GitHub Exploit DB Packet Storm

268239	5.3	MEDIUM Network	theforeman	foreman	Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtai…	CWE-200 Information Exposure	CVE-2016-4995	2024-11-21 11:53	2016-08-20	Show	GitHub Exploit DB Packet Storm

268240	9.8	CRITICAL Network	google	chrome	Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.	NVD-CWE-noinfo	CVE-2016-5146	2024-11-21 11:53	2016-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed