Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228651	4	警告	フェンリル株式会社	-	Sleipnir Mobile for Android において任意のエクステンション API が呼び出される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2304	2013-04-12 12:01	2013-04-12	Show	GitHub Exploit DB Packet Storm

228652	4.3	警告	Splunk	-	Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2766	2013-04-12 11:04	2013-03-25	Show	GitHub Exploit DB Packet Storm

228653	5	警告	Puppet	-	Puppet Labs の Puppet Enterprise におけるコンソールアクセスを取得される脆弱性	CWE-310 暗号の問題	CVE-2013-2716	2013-04-12 11:03	2013-03-28	Show	GitHub Exploit DB Packet Storm

228654	7.5	危険	Digineo	-	Ruby 用 Thumbshooter gem の lib/thumbshooter.rb における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1898	2013-04-11 19:42	2013-03-25	Show	GitHub Exploit DB Packet Storm

228655	7.5	危険	Dan Kubb	-	Ruby 用 extlib gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1802	2013-04-11 19:41	2013-01-14	Show	GitHub Exploit DB Packet Storm

228656	7.5	危険	John Nunemaker	-	Ruby 用 httparty gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1801	2013-04-11 19:41	2013-01-14	Show	GitHub Exploit DB Packet Storm

228657	7.5	危険	John Nunemaker	-	Ruby 用 crack gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1800	2013-04-11 19:40	2013-01-14	Show	GitHub Exploit DB Packet Storm

228658	7.5	危険	Daniel Harrington	-	Ruby 用 nori gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0285	2013-04-11 19:39	2013-01-14	Show	GitHub Exploit DB Packet Storm

228659	5	警告	New Relic	-	Ruby Agent における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-0284	2013-04-11 19:38	2013-02-13	Show	GitHub Exploit DB Packet Storm

228660	6.8	警告	Michael Bleigh and Intridea, Inc.	-	Ruby 用 omniauth-oauth2 gem におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-6134	2013-04-11 19:37	2013-02-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273841	5.3	MEDIUM Network	moxa	ioadmin_firmware iologik_firmware	Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via un…	CWE-255 Credentials Management	CVE-2016-2283	2024-11-21 11:48	2016-03-5	Show	GitHub Exploit DB Packet Storm

273842	5.3	MEDIUM Network	moxa	ioadmin_firmware iologik_firmware	Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext…	CWE-255 Credentials Management	CVE-2016-2282	2024-11-21 11:48	2016-03-5	Show	GitHub Exploit DB Packet Storm

273843	5.9	MEDIUM Network	hp	futuresmart_firmware	HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-2244	2024-11-21 11:48	2016-03-5	Show	GitHub Exploit DB Packet Storm

273844	7.9	HIGH Local	hp	700_series_firmware 800_series_firmware z240_firmware z238_firmware zbook_firmware 1000_series_firmware elitebook_folio_1012_x2_g2	Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access.	CWE-284 Improper Access Control	CVE-2016-2243	2024-11-21 11:48	2016-03-5	Show	GitHub Exploit DB Packet Storm

273845	9.8	CRITICAL Network	openssl	openssl	The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cau…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2842	2024-11-21 11:48	2016-03-4	Show	GitHub Exploit DB Packet Storm

273846	6.1	MEDIUM Network	rockwellautomation	compactlogix_1769-l16er-bb1b_firmware compactlogix_1769-l18er-bb1b_firmware compactlogix_1769-l18erm-bb1b_firmware compactlogix_1769-l24er-qb1b_firmware compactlogix_1769-l24er-qbfc1b_fir…	Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2016-2279	2024-11-21 11:48	2016-03-2	Show	GitHub Exploit DB Packet Storm

273847	7.2	HIGH Network	schneider-electric	struxureware_building_operations_automation_server_as_firmware struxureware_building_operations_automation_server_as-p_firmware	Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeat…	CWE-284 Improper Access Control	CVE-2016-2278	2024-11-21 11:48	2016-03-2	Show	GitHub Exploit DB Packet Storm

273848	6.8	MEDIUM Network	phpmyadmin	phpmyadmin	The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to…	CWE-20 Improper Input Validation	CVE-2016-2562	2024-11-21 11:48	2016-03-1	Show	GitHub Exploit DB Packet Storm

273849	5.4	MEDIUM Network	phpmyadmin	phpmyadmin	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normal…	CWE-79 Cross-site Scripting	CVE-2016-2561	2024-11-21 11:48	2016-03-1	Show	GitHub Exploit DB Packet Storm

273850	6.1	MEDIUM Network	phpmyadmin	phpmyadmin	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2016-2560	2024-11-21 11:48	2016-03-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed