Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240511	4.3	警告	Bharat Mediratta	-	Gallery の管理サブシステムにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1113	2012-09-5 16:51	2012-04-3	Show	GitHub Exploit DB Packet Storm

240512	9.3	危険	アドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-0779	2012-09-5 16:37	2012-05-4	Show	GitHub Exploit DB Packet Storm

240513	2.9	注意	シマンテック	-	Symantec PGP Universal Server における秘密鍵を読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3582	2012-09-5 15:12	2012-08-30	Show	GitHub Exploit DB Packet Storm

240514	7.7	危険	GarrettCom, Inc.	-	GarrettCom Magnum MNS-6K の Management Software アプリケーションにおける権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-3014	2012-09-5 15:09	2012-08-30	Show	GitHub Exploit DB Packet Storm

240515	10	危険	アドビシステムズ	-	Adobe Photoshop におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0275	2012-09-5 14:27	2012-08-30	Show	GitHub Exploit DB Packet Storm

240516	9.3	危険	DELL EMC (旧 EMC Corporation)	-	EMC NetWorker の nsrd RPC サービスにおけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2012-2288	2012-09-5 14:26	2012-09-4	Show	GitHub Exploit DB Packet Storm

240517	6.8	警告	ZTE	-	ZTE ZXDSL の accessaccount.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4746	2012-09-5 11:48	2012-08-31	Show	GitHub Exploit DB Packet Storm

240518	4.3	警告	The Collective	-	Acuity CMS の admin/login.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4745	2012-09-5 11:47	2012-08-31	Show	GitHub Exploit DB Packet Storm

240519	4.3	警告	eos.pe	-	Zeroboard 用 Siche Search モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4744	2012-09-5 11:46	2012-08-31	Show	GitHub Exploit DB Packet Storm

240520	7.5	危険	eos.pe	-	Zeroboard 用 Siche Search モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4743	2012-09-5 11:45	2012-08-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267351	6.5	MEDIUM Network	gnu debian	cpio debian_linux	The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2037	2024-11-21 11:47	2016-02-23	Show	GitHub Exploit DB Packet Storm

267352	5.4	MEDIUM Network	phpmyadmin fedoraproject	phpmyadmin fedora	Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON…	CWE-79 Cross-site Scripting	CVE-2016-2045	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267353	5.3	MEDIUM Network	fedoraproject phpmyadmin	fedora phpmyadmin	libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an e…	CWE-200 Information Exposure	CVE-2016-2044	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267354	5.4	MEDIUM Network	fedoraproject opensuse phpmyadmin	fedora leap opensuse phpmyadmin	Cross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote authenticated users to inject ar…	CWE-79 Cross-site Scripting	CVE-2016-2043	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267355	5.3	MEDIUM Network	opensuse fedoraproject phpmyadmin	leap opensuse fedora phpmyadmin	phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or (2) libraries/phpsecl…	CWE-200 Information Exposure	CVE-2016-2042	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267356	7.5	HIGH Network	fedoraproject phpmyadmin opensuse	fedora phpmyadmin leap opensuse	libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier fo…	CWE-254 7PK - Security Features	CVE-2016-2041	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267357	5.4	MEDIUM Network	fedoraproject opensuse phpmyadmin	fedora leap opensuse phpmyadmin	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script…	CWE-79 Cross-site Scripting	CVE-2016-2040	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267358	5.3	MEDIUM Network	opensuse phpmyadmin fedoraproject	leap opensuse phpmyadmin fedora	libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass int…	CWE-200 Information Exposure	CVE-2016-2039	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267359	5.3	MEDIUM Network	phpmyadmin fedoraproject opensuse	phpmyadmin fedora leap opensuse	phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error…	CWE-200 Information Exposure	CVE-2016-2038	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

267360	7.5	HIGH Network	phpmyadmin	phpmyadmin	The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easie…	CWE-255 CWE-254 Credentials Management 7PK - Security Features	CVE-2016-1927	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed