Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228691 6.8 警告 シスコシステムズ - Cisco Unified MeetingPlace のサーバにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-1128 2013-02-22 12:14 2013-02-11 Show GitHub Exploit DB Packet Storm
228692 2.6 注意 IBM - IBM WebSphere Message Broker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0466 2013-02-21 18:37 2013-02-19 Show GitHub Exploit DB Packet Storm
228693 3.5 注意 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0457 2013-02-21 18:36 2013-02-15 Show GitHub Exploit DB Packet Storm
228694 6.5 警告 IBM - 複数の IBM 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6357 2013-02-21 18:36 2013-02-15 Show GitHub Exploit DB Packet Storm
228695 6.5 警告 IBM - 複数の IBM 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6356 2013-02-21 18:35 2013-02-15 Show GitHub Exploit DB Packet Storm
228696 6.5 警告 IBM - 複数の IBM 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6355 2013-02-21 18:34 2013-02-15 Show GitHub Exploit DB Packet Storm
228697 4.3 警告 IBM - IBM WebSphere Message Broker におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-119
バッファエラー
CVE-2012-5953 2013-02-21 18:34 2013-02-12 Show GitHub Exploit DB Packet Storm
228698 5 警告 IBM - IBM WebSphere Message Broker における認証されていないメッセージの送信を誘発される脆弱性 CWE-287
不適切な認証
CVE-2012-5952 2013-02-21 18:33 2013-02-12 Show GitHub Exploit DB Packet Storm
228699 3.5 注意 IBM - IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5941 2013-02-21 18:29 2013-02-20 Show GitHub Exploit DB Packet Storm
228700 4.3 警告 IBM - IBM Netezza の WebAdmin アプリケーションにおける認証情報を発見される脆弱性 CWE-287
不適切な認証
CVE-2012-5940 2013-02-21 18:28 2013-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275061 7.5 HIGH
Network
sendio sendio Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted … CWE-538
 File and Directory Information Exposure
CVE-2016-10399 2024-11-21 11:43 2017-07-28 Show GitHub Exploit DB Packet Storm
275062 7.8 HIGH
Local
avira antivirus Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer ov… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10402 2024-11-21 11:43 2017-07-27 Show GitHub Exploit DB Packet Storm
275063 8.8 HIGH
Network
zyxel pk5001z_firmware ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists … CWE-255
Credentials Management
CVE-2016-10401 2024-11-21 11:43 2017-07-26 Show GitHub Exploit DB Packet Storm
275064 7.5 HIGH
Network
atutor atutor Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/_core/courses/users/create_course.php. The attacker can read an arbitrary file by visiting get_course_icon.php?id= af… CWE-22
Path Traversal
CVE-2016-10400 2024-11-21 11:43 2017-07-23 Show GitHub Exploit DB Packet Storm
275065 6.2 MEDIUM
Physics
google android Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE) are protected by… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10398 2024-11-21 11:43 2017-07-17 Show GitHub Exploit DB Packet Storm
275066 7.5 HIGH
Network
php php In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.e… CWE-20
 Improper Input Validation 
CVE-2016-10397 2024-11-21 11:43 2017-07-10 Show GitHub Exploit DB Packet Storm
275067 7.5 HIGH
Network
ipsec-tools ipsec-tools The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhau… CWE-407
 Inefficient Algorithmic Complexity
CVE-2016-10396 2024-11-21 11:43 2017-07-6 Show GitHub Exploit DB Packet Storm
275068 7.5 HIGH
Network
arcadyan swisscom_internet-box_firmware Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticat… CWE-284
Improper Access Control
CVE-2016-10042 2024-11-21 11:43 2017-06-29 Show GitHub Exploit DB Packet Storm
275069 6.1 MEDIUM
Network
elastic kibana Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack. CWE-79
Cross-site Scripting
CVE-2016-10366 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm
275070 6.1 MEDIUM
Network
elastic kibana Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link in the Kibana domain that redirects to an arbitrary website. CWE-601
Open Redirect
CVE-2016-10365 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm