Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226511 2.1 注意 Erik Webb - Drupal 用 Password Policy モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4274 2013-08-30 16:37 2013-08-14 Show GitHub Exploit DB Packet Storm
226512 4.3 警告 BOTCHA Spam Prevention - Drupal 用 BOTCHA Spam Prevention モジュールにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4272 2013-08-30 16:36 2013-08-14 Show GitHub Exploit DB Packet Storm
226513 5 警告 Stage File Proxy - Drupal 用 Stage File Proxy モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-4139 2013-08-30 16:35 2013-07-10 Show GitHub Exploit DB Packet Storm
226514 4.3 警告 Login Security - Drupal 用 Login Security モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-2197 2013-08-30 16:34 2013-06-19 Show GitHub Exploit DB Packet Storm
226515 4.7 警告 Xen プロジェクト - Xen の Intel VT-d Interrupt Remapping エンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3495 2013-08-30 16:25 2013-08-20 Show GitHub Exploit DB Packet Storm
226516 5.7 警告 Xen プロジェクト - Xen の vmx_set_uc_mode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-2212 2013-08-30 16:24 2013-06-24 Show GitHub Exploit DB Packet Storm
226517 7.4 危険 Xen プロジェクト - Xen の xc_vcpu_setaffinity コール用 Python バインディングにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2072 2013-08-30 16:10 2013-05-17 Show GitHub Exploit DB Packet Storm
226518 7.2 危険 レッドハット - Red Hat Enterprise Virtualization Application Provisioning Tool における権限を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2176 2013-08-30 15:41 2013-07-31 Show GitHub Exploit DB Packet Storm
226519 4.3 警告 Novell
strongSwan		 - strongSwan の is_asn1 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-5018 2013-08-30 15:36 2013-08-1 Show GitHub Exploit DB Packet Storm
226520 5 警告 Fail2ban - Fail2ban の複数の .conf ファイルにおける任意の IP アドレスをブロックされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2178 2013-08-30 15:33 2013-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274711 6.1 MEDIUM
Network 		phpthumb_project phpthumb Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php. CWE-79
Cross-site Scripting 		CVE-2016-10508 2024-11-21 11:44 2017-09-1 Show GitHub Exploit DB Packet Storm
274712 6.5 MEDIUM
Network 		uclouvain openjpeg Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application … CWE-190
 Integer Overflow or Wraparound 		CVE-2016-10507 2024-11-21 11:44 2017-08-30 Show GitHub Exploit DB Packet Storm
274713 6.5 MEDIUM
Network 		uclouvain openjpeg Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (applic… CWE-369
 Divide By Zero 		CVE-2016-10506 2024-11-21 11:44 2017-08-30 Show GitHub Exploit DB Packet Storm
274714 6.5 MEDIUM
Network 		uclouvain openjpeg NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in… CWE-476
 NULL Pointer Dereference 		CVE-2016-10505 2024-11-21 11:44 2017-08-30 Show GitHub Exploit DB Packet Storm
274715 6.5 MEDIUM
Network 		uclouvain openjpeg Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp f… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10504 2024-11-21 11:44 2017-08-30 Show GitHub Exploit DB Packet Storm
274716 4.3 MEDIUM
Network 		ibm sametime IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. I… CWE-20
 Improper Input Validation  		CVE-2016-10503 2024-11-21 11:44 2017-08-30 Show GitHub Exploit DB Packet Storm
274717 6.1 MEDIUM
Network 		apostrophecms sanitize-html sanitize-html before 1.4.3 has XSS. CWE-79
Cross-site Scripting 		CVE-2016-1000237 2024-11-21 11:43 2020-01-24 Show GitHub Exploit DB Packet Storm
274718 6.1 MEDIUM
Network 		smartbear
redhat 		swagger-ui
openshift
jboss_fuse 		swagger-ui has XSS in key names CWE-79
Cross-site Scripting 		CVE-2016-1000229 2024-11-21 11:43 2019-12-20 Show GitHub Exploit DB Packet Storm
274719 4.4 MEDIUM
Network 		cookie-signature_project
debian 		cookie-signature
debian_linux 		Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used. CWE-362
Race Condition 		CVE-2016-1000236 2024-11-21 11:43 2019-11-20 Show GitHub Exploit DB Packet Storm
274720 6.1 MEDIUM
Network 		doxygen doxygen Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. CWE-79
Cross-site Scripting 		CVE-2016-10245 2024-11-21 11:43 2019-05-25 Show GitHub Exploit DB Packet Storm