Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228661 8.8 危険 ヒューレット・パッカード - HP LaserJet Pro シリーズにアクセス制限不備の脆弱性 CWE-noinfo
情報不足 		CVE-2012-5215 2013-03-19 18:19 2013-03-12 Show GitHub Exploit DB Packet Storm
228662 4.3 警告 Spree Commerce - Spree における任意の Ruby オブジェクトをインスタンス化される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1656 2013-03-19 17:21 2013-02-21 Show GitHub Exploit DB Packet Storm
228663 5 警告 Eucalyptus Systems - Eucalyptus におけるスナップショットを削除またはアップロードされる脆弱性 CWE-287
不適切な認証 		CVE-2012-4066 2013-03-19 17:06 2013-02-28 Show GitHub Exploit DB Packet Storm
228664 6.8 警告 アップル - Apple Mac OS X のソフトウェアアップデートにおけるプラグインコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0973 2013-03-19 16:57 2013-03-15 Show GitHub Exploit DB Packet Storm
228665 6.8 警告 アップル - Apple Mac OS X の PDFKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0971 2013-03-19 16:55 2013-03-15 Show GitHub Exploit DB Packet Storm
228666 4.3 警告 アップル - Apple Mac OS X のメッセージにおける FaceTime のコール確認画面を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0970 2013-03-19 16:54 2013-03-15 Show GitHub Exploit DB Packet Storm
228667 4.9 警告 アップル - Apple Mac OS X のログイン画面における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0969 2013-03-19 16:53 2013-03-15 Show GitHub Exploit DB Packet Storm
228668 4.3 警告 アップル - Apple Mac OS X の CoreTypes における Java プラグインの無効設定を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0967 2013-03-19 16:49 2013-03-15 Show GitHub Exploit DB Packet Storm
228669 6.4 警告 アップル - Apple Mac OS X におけるディレクトリ認証要求を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0966 2013-03-19 16:47 2013-03-15 Show GitHub Exploit DB Packet Storm
228670 7.5 危険 マイクロソフト - Windows 8 の Microsoft Internet Explorer 10 におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2552 2013-03-19 10:42 2013-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274841 8.6 HIGH
Network 		palletsprojects jinja In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. CWE-134
Use of Externally-Controlled Format String 		CVE-2016-10745 2024-11-21 11:44 2019-04-8 Show GitHub Exploit DB Packet Storm
274842 6.1 MEDIUM
Network 		select2 select2 In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data. CWE-79
Cross-site Scripting 		CVE-2016-10744 2024-11-21 11:44 2019-03-27 Show GitHub Exploit DB Packet Storm
274843 7.5 HIGH
Network 		w1.fi hostapd hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call. CWE-332
 Insufficient Entropy in PRNG 		CVE-2016-10743 2024-11-21 11:44 2019-03-24 Show GitHub Exploit DB Packet Storm
274844 6.1 MEDIUM
Network 		zabbix
debian 		zabbix
debian_linux 		Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter. CWE-601
Open Redirect 		CVE-2016-10742 2024-11-21 11:44 2019-02-18 Show GitHub Exploit DB Packet Storm
274845 4.7 MEDIUM
Local 		linux
debian 		linux_kernel
debian_linux 		In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated w… CWE-362
Race Condition 		CVE-2016-10741 2024-11-21 11:44 2019-02-2 Show GitHub Exploit DB Packet Storm
274846 4.9 MEDIUM
Network 		atlassian crowd Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to reques… CWE-200
Information Exposure 		CVE-2016-10740 2024-11-21 11:44 2019-01-29 Show GitHub Exploit DB Packet Storm
274847 5.3 MEDIUM
Local 		gnu
opensuse 		glibc
leap 		In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, whic… CWE-20
 Improper Input Validation  		CVE-2016-10739 2024-11-21 11:44 2019-01-22 Show GitHub Exploit DB Packet Storm
274848 8.8 HIGH
Network 		castlamp zenbership Zenbership v107 has CSRF via admin/cp-functions/event-add.php. CWE-352
 Origin Validation Error 		CVE-2016-10738 2024-11-21 11:44 2019-01-16 Show GitHub Exploit DB Packet Storm
274849 5.4 MEDIUM
Network 		s9y serendipity Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter. CWE-79
Cross-site Scripting 		CVE-2016-10737 2024-11-21 11:44 2019-01-16 Show GitHub Exploit DB Packet Storm
274850 6.1 MEDIUM
Network 		devpups social_pug The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter. CWE-79
Cross-site Scripting 		CVE-2016-10736 2024-11-21 11:44 2019-01-10 Show GitHub Exploit DB Packet Storm