Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240481	7.8	危険	Arbiter Systems	-	Arbiter Systems Power Sentinel 1133A デバイスのファームウェアにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-3012	2012-09-7 15:15	2012-09-5	Show	GitHub Exploit DB Packet Storm

240482	6.8	警告	Wikka Development Team	-	WikkaWiki の AdminUsers コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4452	2012-09-7 15:13	2011-11-13	Show	GitHub Exploit DB Packet Storm

240483	6.4	警告	Wikka Development Team	-	WikkaWiki の handlers/files.xml/files.xml.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4450	2012-09-7 15:12	2011-12-6	Show	GitHub Exploit DB Packet Storm

240484	6.8	警告	Wikka Development Team	-	WikkaWiki の actions/files/files.php における任意の PHP コードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4449	2012-09-7 15:09	2011-12-3	Show	GitHub Exploit DB Packet Storm

240485	7.5	危険	Wikka Development Team	-	WikkaWiki の actions/usersettings/usersettings.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4448	2012-09-7 14:56	2011-12-3	Show	GitHub Exploit DB Packet Storm

240486	5	警告	Apache Software Foundation	-	Apache Struts におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4387	2012-09-7 14:54	2012-08-3	Show	GitHub Exploit DB Packet Storm

240487	6.8	警告	Apache Software Foundation	-	Apache Struts のトークンチェックメカニズムにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4386	2012-09-7 14:52	2012-08-3	Show	GitHub Exploit DB Packet Storm

240488	5	警告	Thomas Eibner	-	Apache HTTP Server 用 mod_rpaf モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3526	2012-09-7 14:49	2012-09-5	Show	GitHub Exploit DB Packet Storm

240489	2.1	注意	Tigerfish	-	Drupal 用 Fancy Slide モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2068	2012-09-6 14:05	2012-03-14	Show	GitHub Exploit DB Packet Storm

240490	6.8	警告	CKEditor Team	-	Drupal 用 FCKeditor および CKEditor モジュールにおける任意の PHP コードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-2067	2012-09-6 14:03	2012-03-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267721	7.5	HIGH Network	cisco	firesight_system_software asa_with_firepower_services	Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka B…	CWE-20 Improper Input Validation	CVE-2016-1345	2024-11-21 11:46	2016-04-1	Show	GitHub Exploit DB Packet Storm

267722	8.8	HIGH Network	opensuse debian google	opensuse debian_linux chrome	The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of servi…	NVD-CWE-noinfo	CVE-2016-1650	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

267723	8.8	HIGH Network	debian canonical opensuse google	debian_linux ubuntu_linux opensuse chrome	The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attacker…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1649	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

267724	8.8	HIGH Network	google opensuse debian	chrome opensuse debian_linux	Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to…	NVD-CWE-Other	CVE-2016-1648	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

267725	8.8	HIGH Network	google canonical debian opensuse	chrome ubuntu_linux debian_linux opensuse	Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.26…	NVD-CWE-Other	CVE-2016-1647	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

267726	6.1	MEDIUM Network	sun	opensolaris	Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bu…	CWE-79 Cross-site Scripting	CVE-2016-1314	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

267727	7.5	HIGH Network	cisco	nx-os ios	The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header…	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2016-1351	2024-11-21 11:46	2016-03-26	Show	GitHub Exploit DB Packet Storm

267728	7.5	HIGH Network	cisco samsung sun zyxel lenovo zzinc	ios_xe x14j_firmware opensolaris gs1900-10hp_firmware thinkcentre_e75s_firmware keymouse_firmware	Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bu…	CWE-399 Resource Management Errors	CVE-2016-1350	2024-11-21 11:46	2016-03-26	Show	GitHub Exploit DB Packet Storm

267729	7.5	HIGH Network	cisco samsung sun intel zyxel netgear zzinc	ios_xe x14j_firmware opensolaris core_i5-9400f_firmware gs1900-10hp_firmware jr6150_firmware keymouse_firmware	The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parame…	CWE-399 Resource Management Errors	CVE-2016-1349	2024-11-21 11:46	2016-03-26	Show	GitHub Exploit DB Packet Storm

267730	7.5	HIGH Network	cisco samsung sun zyxel netgear zzinc	ios_xe x14j_firmware opensolaris gs1900-10hp_firmware jr6150_firmware keymouse_firmware	Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821.	CWE-399 Resource Management Errors	CVE-2016-1348	2024-11-21 11:46	2016-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed