Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240511 4.3 警告 Bharat Mediratta - Gallery の管理サブシステムにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1113 2012-09-5 16:51 2012-04-3 Show GitHub Exploit DB Packet Storm
240512 9.3 危険 アドビシステムズ - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-0779 2012-09-5 16:37 2012-05-4 Show GitHub Exploit DB Packet Storm
240513 2.9 注意 シマンテック - Symantec PGP Universal Server における秘密鍵を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3582 2012-09-5 15:12 2012-08-30 Show GitHub Exploit DB Packet Storm
240514 7.7 危険 GarrettCom, Inc. - GarrettCom Magnum MNS-6K の Management Software アプリケーションにおける権限を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-3014 2012-09-5 15:09 2012-08-30 Show GitHub Exploit DB Packet Storm
240515 10 危険 アドビシステムズ - Adobe Photoshop におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0275 2012-09-5 14:27 2012-08-30 Show GitHub Exploit DB Packet Storm
240516 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC NetWorker の nsrd RPC サービスにおけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2012-2288 2012-09-5 14:26 2012-09-4 Show GitHub Exploit DB Packet Storm
240517 6.8 警告 ZTE - ZTE ZXDSL の accessaccount.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-4746 2012-09-5 11:48 2012-08-31 Show GitHub Exploit DB Packet Storm
240518 4.3 警告 The Collective - Acuity CMS の admin/login.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4745 2012-09-5 11:47 2012-08-31 Show GitHub Exploit DB Packet Storm
240519 4.3 警告 eos.pe - Zeroboard 用 Siche Search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4744 2012-09-5 11:46 2012-08-31 Show GitHub Exploit DB Packet Storm
240520 7.5 危険 eos.pe - Zeroboard 用 Siche Search モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4743 2012-09-5 11:45 2012-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267931 4.3 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2016-11080 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267932 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL. CWE-79
Cross-site Scripting
CVE-2016-11079 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267933 6.5 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI. CWE-200
Information Exposure
CVE-2016-11078 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267934 2.7 LOW
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2016-11077 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267935 5.3 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL. CWE-295
Improper Certificate Validation 
CVE-2016-11076 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267936 5.3 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API. CWE-200
Information Exposure
CVE-2016-11075 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267937 9.8 CRITICAL
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused. CWE-287
Improper Authentication
CVE-2016-11074 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267938 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting. CWE-79
Cross-site Scripting
CVE-2016-11073 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267939 6.5 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled. CWE-287
Improper Authentication
CVE-2016-11072 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm
267940 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place. CWE-79
Cross-site Scripting
CVE-2016-11071 2024-11-21 11:45 2020-06-20 Show GitHub Exploit DB Packet Storm