Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240531	6.8	警告	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management における Web セッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2012-2184	2012-09-12 16:18	2012-09-4	Show	GitHub Exploit DB Packet Storm

240532	6.8	警告	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management における Web セッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2012-2183	2012-09-12 16:17	2012-09-4	Show	GitHub Exploit DB Packet Storm

240533	6.5	警告	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0747	2012-09-12 16:16	2012-09-4	Show	GitHub Exploit DB Packet Storm

240534	3.5	注意	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0746	2012-09-12 16:16	2012-09-4	Show	GitHub Exploit DB Packet Storm

240535	6.5	警告	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0728	2012-09-12 16:15	2012-09-4	Show	GitHub Exploit DB Packet Storm

240536	6.5	警告	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0727	2012-09-12 16:13	2012-09-4	Show	GitHub Exploit DB Packet Storm

240537	6.8	警告	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0714	2012-09-12 16:12	2012-09-4	Show	GitHub Exploit DB Packet Storm

240538	6.8	警告	OpenKM	-	OpenKM におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2316	2012-09-12 14:20	2012-01-4	Show	GitHub Exploit DB Packet Storm

240539	4	警告	OpenKM	-	OpenKM における任意のユーザに管理者権限を割り当てられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2315	2012-09-12 14:19	2012-01-4	Show	GitHub Exploit DB Packet Storm

240540	4.3	警告	chatelao	-	PHP Address Book の preferences.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1912	2012-09-12 13:54	2012-09-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267261	6.1	MEDIUM Network	vmware	vrealize_log_insight	Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-2081	2024-11-21 11:47	2016-07-3	Show	GitHub Exploit DB Packet Storm

267262	5.9	MEDIUM Network	vmware	nsx_edge vcloud_networking_and_security_edge	VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified …	CWE-200 Information Exposure	CVE-2016-2079	2024-11-21 11:47	2016-07-3	Show	GitHub Exploit DB Packet Storm

267263	9.8	CRITICAL Network	redhat	jgroups jboss_enterprise_application_platform	It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use…	NVD-CWE-noinfo	CVE-2016-2141	2024-11-21 11:47	2016-07-1	Show	GitHub Exploit DB Packet Storm

267264	5.5	MEDIUM Local	openssl oracle suse nodejs debian canonical	openssl solaris linux linux_enterprise node.js debian_linux ubuntu_linux	The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA pr…	CWE-203 Information Exposure Through Discrepancy	CVE-2016-2178	2024-11-21 11:47	2016-06-20	Show	GitHub Exploit DB Packet Storm

267265	9.8	CRITICAL Network	hp openssl oracle	icewall_sso icewall_mcrp icewall_sso_agent_option openssl solaris linux	OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or…	CWE-190 Integer Overflow or Wraparound	CVE-2016-2177	2024-11-21 11:47	2016-06-20	Show	GitHub Exploit DB Packet Storm

267266	4.3	MEDIUM Network	apple	safari iphone_os	The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a…	CWE-200 Information Exposure	CVE-2016-1864	2024-11-21 11:47	2016-06-20	Show	GitHub Exploit DB Packet Storm

267267	3.3	LOW Local	apple	mac_os_x	Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than CVE-2016-1860.	CWE-200 CWE-254 Information Exposure 7PK - Security Features	CVE-2016-1862	2024-11-21 11:47	2016-06-20	Show	GitHub Exploit DB Packet Storm

267268	7.8	HIGH Local	apple	mac_os_x	The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted ap…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1861	2024-11-21 11:47	2016-06-20	Show	GitHub Exploit DB Packet Storm

267269	3.3	LOW Local	apple	mac_os_x	Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than CVE-2016-1862.	CWE-200 CWE-254 Information Exposure 7PK - Security Features	CVE-2016-1860	2024-11-21 11:47	2016-06-20	Show	GitHub Exploit DB Packet Storm

267270	7.2	HIGH Network	apache	ranger	SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/…	CWE-89 SQL Injection	CVE-2016-2174	2024-11-21 11:47	2016-06-13	Show	GitHub Exploit DB Packet Storm