Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227291 10 危険 3S-Smart Software Solutions - 3S CODESYS Gateway-Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-4705 2013-02-27 15:02 2013-02-19 Show GitHub Exploit DB Packet Storm
227292 10 危険 3S-Smart Software Solutions - 3S CODESYS Gateway-Server における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-4704 2013-02-27 15:01 2013-02-19 Show GitHub Exploit DB Packet Storm
227293 6.8 警告 Honeywell International Inc. - 複数の Honeywell 製品の HscRemoteDeploy.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-0108 2013-02-27 14:39 2013-02-24 Show GitHub Exploit DB Packet Storm
227294 10 危険 Novell - Novell GroupWise のクライアントにおける任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-0804 2013-02-27 09:54 2013-01-23 Show GitHub Exploit DB Packet Storm
227295 9.3 危険 Novell - Novell GroupWise のクライアント内の gwcls1.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0439 2013-02-27 09:54 2013-01-23 Show GitHub Exploit DB Packet Storm
227296 10 危険 BigAntSoft - BigAntSoft BigAnt IM Message Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-6275 2013-02-26 16:03 2013-02-24 Show GitHub Exploit DB Packet Storm
227297 9.7 危険 BigAntSoft - BigAntSoft BigAnt IM Message Server における任意のファイルを作成される脆弱性 CWE-287
不適切な認証
CVE-2012-6274 2013-02-26 16:03 2013-02-24 Show GitHub Exploit DB Packet Storm
227298 7.5 危険 BigAntSoft - BigAntSoft BigAnt IM Message Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-6273 2013-02-26 16:02 2013-02-24 Show GitHub Exploit DB Packet Storm
227299 7.6 危険 VMware - 複数の VMware 製品における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-1659 2013-02-26 15:37 2013-02-21 Show GitHub Exploit DB Packet Storm
227300 7.8 危険 VMware - VMware vCenter Server におけるサービス運用妨害 (ディスクの消費) の脆弱性 CWE-119
バッファエラー
CVE-2012-6326 2013-02-26 15:36 2012-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273341 6.5 MEDIUM
Network
uclouvain openjpeg Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp f… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10504 2024-11-21 11:44 2017-08-30 Show GitHub Exploit DB Packet Storm
273342 4.3 MEDIUM
Network
ibm sametime IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. I… CWE-20
 Improper Input Validation 
CVE-2016-10503 2024-11-21 11:44 2017-08-30 Show GitHub Exploit DB Packet Storm
273343 6.1 MEDIUM
Network
apostrophecms sanitize-html sanitize-html before 1.4.3 has XSS. CWE-79
Cross-site Scripting
CVE-2016-1000237 2024-11-21 11:43 2020-01-24 Show GitHub Exploit DB Packet Storm
273344 6.1 MEDIUM
Network
smartbear
redhat
swagger-ui
openshift
jboss_fuse
swagger-ui has XSS in key names CWE-79
Cross-site Scripting
CVE-2016-1000229 2024-11-21 11:43 2019-12-20 Show GitHub Exploit DB Packet Storm
273345 4.4 MEDIUM
Network
cookie-signature_project
debian
cookie-signature
debian_linux
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used. CWE-362
Race Condition
CVE-2016-1000236 2024-11-21 11:43 2019-11-20 Show GitHub Exploit DB Packet Storm
273346 6.1 MEDIUM
Network
doxygen doxygen Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. CWE-79
Cross-site Scripting
CVE-2016-10245 2024-11-21 11:43 2019-05-25 Show GitHub Exploit DB Packet Storm
273347 9.8 CRITICAL
Network
haraka_project haraka Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection. CWE-77
Command Injection
CVE-2016-1000282 2024-11-21 11:43 2019-02-6 Show GitHub Exploit DB Packet Storm
273348 9.8 CRITICAL
Network
dthdevelopment dt_register Joomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an SQL injection in "/index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events". This attack app… CWE-89
SQL Injection
CVE-2016-1000271 2024-11-21 11:43 2019-02-5 Show GitHub Exploit DB Packet Storm
273349 8.8 HIGH
Network
google chrome Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. CWE-125
Out-of-bounds Read
CVE-2016-10403 2024-11-21 11:43 2019-01-10 Show GitHub Exploit DB Packet Storm
273350 5.3 MEDIUM
Network
salesforce
ibm
redhat
tough-cookie
api_connect
openshift_container_platform
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable … CWE-20
 Improper Input Validation 
CVE-2016-1000232 2024-11-21 11:43 2018-09-6 Show GitHub Exploit DB Packet Storm