Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240481 7.8 危険 Arbiter Systems - Arbiter Systems Power Sentinel 1133A デバイスのファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-3012 2012-09-7 15:15 2012-09-5 Show GitHub Exploit DB Packet Storm
240482 6.8 警告 Wikka Development Team - WikkaWiki の AdminUsers コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4452 2012-09-7 15:13 2011-11-13 Show GitHub Exploit DB Packet Storm
240483 6.4 警告 Wikka Development Team - WikkaWiki の handlers/files.xml/files.xml.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4450 2012-09-7 15:12 2011-12-6 Show GitHub Exploit DB Packet Storm
240484 6.8 警告 Wikka Development Team - WikkaWiki の actions/files/files.php における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4449 2012-09-7 15:09 2011-12-3 Show GitHub Exploit DB Packet Storm
240485 7.5 危険 Wikka Development Team - WikkaWiki の actions/usersettings/usersettings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4448 2012-09-7 14:56 2011-12-3 Show GitHub Exploit DB Packet Storm
240486 5 警告 Apache Software Foundation - Apache Struts におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4387 2012-09-7 14:54 2012-08-3 Show GitHub Exploit DB Packet Storm
240487 6.8 警告 Apache Software Foundation - Apache Struts のトークンチェックメカニズムにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4386 2012-09-7 14:52 2012-08-3 Show GitHub Exploit DB Packet Storm
240488 5 警告 Thomas Eibner - Apache HTTP Server 用 mod_rpaf モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3526 2012-09-7 14:49 2012-09-5 Show GitHub Exploit DB Packet Storm
240489 2.1 注意 Tigerfish - Drupal 用 Fancy Slide モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2068 2012-09-6 14:05 2012-03-14 Show GitHub Exploit DB Packet Storm
240490 6.8 警告 CKEditor Team - Drupal 用 FCKeditor および CKEditor モジュールにおける任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-2067 2012-09-6 14:03 2012-03-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267561 8.6 HIGH
Network 		cisco firesight_system_software Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID CSCuz56238. CWE-255
CWE-264
Credentials Management
Permissions, Privileges, and Access Controls 		CVE-2016-1394 2024-11-21 11:46 2016-07-3 Show GitHub Exploit DB Packet Storm
267562 5.3 MEDIUM
Network 		cisco web_security_appliance The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improp… CWE-399
 Resource Management Errors 		CVE-2016-1440 2024-11-21 11:46 2016-07-2 Show GitHub Exploit DB Packet Storm
267563 9.8 CRITICAL
Network 		cisco prime_collaboration_provisioning Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bu… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1416 2024-11-21 11:46 2016-07-2 Show GitHub Exploit DB Packet Storm
267564 8.8 HIGH
Network 		cisco prime_infrastructure
evolved_programmable_network_manager 		Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTT… CWE-20
 Improper Input Validation  		CVE-2016-1408 2024-11-21 11:46 2016-07-2 Show GitHub Exploit DB Packet Storm
267565 9.8 CRITICAL
Network 		cisco prime_infrastructure
evolved_programmable_network_manager 		The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1289 2024-11-21 11:46 2016-07-2 Show GitHub Exploit DB Packet Storm
267566 5.5 MEDIUM
Local 		linux linux_kernel nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c. CWE-284
Improper Access Control 		CVE-2016-1237 2024-11-21 11:46 2016-06-29 Show GitHub Exploit DB Packet Storm
267567 7.8 HIGH
Local 		linux
novell
canonical
debian 		linux_kernel
suse_linux_enterprise_server
suse_linux_enterprise_live_patching
suse_linux_enterprise_desktop
suse_linux_enterprise_module_for_public_cloud
suse_linux_enterprise_workstat… 		The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1583 2024-11-21 11:46 2016-06-27 Show GitHub Exploit DB Packet Storm
267568 6.1 MEDIUM
Network 		cisco unified_contact_center_enterprise Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a cr… CWE-79
Cross-site Scripting 		CVE-2016-1439 2024-11-21 11:46 2016-06-23 Show GitHub Exploit DB Packet Storm
267569 7.5 HIGH
Network 		cisco asyncos Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210. CWE-20
CWE-254
 Improper Input Validation 
 7PK - Security Features 		CVE-2016-1438 2024-11-21 11:46 2016-06-23 Show GitHub Exploit DB Packet Storm
267570 6.5 MEDIUM
Network 		cisco prime_collaboration_deployment SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID… CWE-89
SQL Injection 		CVE-2016-1437 2024-11-21 11:46 2016-06-23 Show GitHub Exploit DB Packet Storm