Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228731 6.8 警告 diy-cms - DiY-CMS の mod.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-6518 2013-01-25 14:32 2013-01-24 Show GitHub Exploit DB Packet Storm
228732 4.3 警告 diy-cms - DiY-CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6517 2013-01-25 14:31 2013-01-24 Show GitHub Exploit DB Packet Storm
228733 7.5 危険 Shawn Bradley - PHP Ticket System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-6516 2013-01-25 14:30 2013-01-24 Show GitHub Exploit DB Packet Storm
228734 5 警告 eFront Learning - eFront における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-6515 2013-01-25 14:30 2013-01-24 Show GitHub Exploit DB Packet Storm
228735 4.3 警告 Netshine Software - Joomla! 用 nBill コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6514 2013-01-25 14:28 2013-01-24 Show GitHub Exploit DB Packet Storm
228736 4.3 警告 gpEasy - gpEasy CMS の index.php/Admin_Preferences におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6513 2013-01-25 14:28 2013-01-24 Show GitHub Exploit DB Packet Storm
228737 5 警告 Imthiaz - WordPress 用 Organizer プラグインにおけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-6512 2013-01-25 14:27 2013-01-24 Show GitHub Exploit DB Packet Storm
228738 4.3 警告 Imthiaz - WordPress 用 Organizer プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6511 2013-01-25 14:26 2013-01-24 Show GitHub Exploit DB Packet Storm
228739 4.3 警告 NetArt Media - NetArt Media Car Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6510 2013-01-25 14:25 2013-01-24 Show GitHub Exploit DB Packet Storm
228740 7.5 危険 NetArt Media - NetArt Media Car Portal における任意の PHP コードを実行される脆弱性 CWE-Other
その他
CVE-2012-6509 2013-01-25 14:25 2013-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274521 8.1 HIGH
Network
dalekjs dalekjs dalek-browser-chrome is Google Chrome bindings for DalekJS. dalek-browser-chrome downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote c… CWE-310
Cryptographic Issues
CVE-2016-10604 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274522 8.1 HIGH
Network
air-sdk_project air-sdk air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by sw… CWE-310
Cryptographic Issues
CVE-2016-10603 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274523 8.1 HIGH
Network
haxe haxe haxe is a cross-platform toolkit haxe downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the req… CWE-310
Cryptographic Issues
CVE-2016-10602 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274524 8.1 HIGH
Network
webrtc webrtc-native webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE… CWE-310
Cryptographic Issues
CVE-2016-10600 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274525 8.1 HIGH
Network
node-sauce-connect_project node-sauce-connect sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves … CWE-310
Cryptographic Issues
CVE-2016-10599 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274526 7.5 HIGH
Network
arrayfire-js_project arrayfire-js arrayfire-js is a module for ArrayFire for the Node.js platform. arrayfire-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code… CWE-310
Cryptographic Issues
CVE-2016-10598 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274527 5.9 MEDIUM
Network
cobalt-cli_project cobalt-cli cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks. CWE-311
Missing Encryption of Sensitive Data
CVE-2016-10597 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274528 8.1 HIGH
Network
imageoptim_project imageoptim imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote… CWE-310
Cryptographic Issues
CVE-2016-10596 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274529 8.1 HIGH
Network
jdf-sass_project jdf-sass jdf-sass is a fork from node-sass, jdf use only. jdf-sass downloads executable resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE)… CWE-310
Cryptographic Issues
CVE-2016-10595 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm
274530 8.1 HIGH
Network
ipip_project ipip ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks. CWE-310
Cryptographic Issues
CVE-2016-10594 2024-11-21 11:44 2018-06-2 Show GitHub Exploit DB Packet Storm