Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240641 7.8 危険 シーメンス - Siemens SIMATIC S7-400 PN CPU におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2012-3016 2012-08-1 16:25 2012-07-30 Show GitHub Exploit DB Packet Storm
240642 9 危険 IBM - IBM Scale Out Network Attached Storage における任意の Linux コマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2163 2012-08-1 16:14 2012-07-27 Show GitHub Exploit DB Packet Storm
240643 4.9 警告 IBM - IBM AIX のカーネルにおけるサービス運用妨害 (システムクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0723 2012-08-1 16:07 2012-06-11 Show GitHub Exploit DB Packet Storm
240644 4.3 警告 Mozilla Foundation - Bugzilla の Template.pm における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1969 2012-08-1 15:22 2012-07-26 Show GitHub Exploit DB Packet Storm
240645 4.3 警告 Mozilla Foundation - Bugzilla における記載された重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1968 2012-07-31 14:25 2012-07-26 Show GitHub Exploit DB Packet Storm
240646 4.3 警告 アップル
Google
- 複数の製品で使用される Webkit におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3040 2012-07-30 19:11 2012-03-4 Show GitHub Exploit DB Packet Storm
240647 7.5 危険 アップル
Google
- 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3924 2012-07-30 18:55 2012-01-23 Show GitHub Exploit DB Packet Storm
240648 7.2 危険 シマンテック - Symantec Web Gateway の管理コンソールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2957 2012-07-30 17:54 2012-07-20 Show GitHub Exploit DB Packet Storm
240649 10 危険 シマンテック - Symantec Web Gateway の管理コンソールにおける任意のシェルコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-2976 2012-07-30 17:52 2012-07-20 Show GitHub Exploit DB Packet Storm
240650 10 危険 シマンテック - Symantec Web Gateway の管理コンソールにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-2953 2012-07-30 17:44 2012-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267931 9.8 CRITICAL
Network
visser store_exporter_for_woocommerce The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10935 2024-11-21 11:45 2019-08-27 Show GitHub Exploit DB Packet Storm
267932 6.1 MEDIUM
Network
check_email_project check_email The check-email plugin before 0.5.2 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10934 2024-11-21 11:45 2019-08-27 Show GitHub Exploit DB Packet Storm
267933 5.9 MEDIUM
Network
portaudio_project portaudio An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext HTTP. CWE-254
 7PK - Security Features
CVE-2016-10933 2024-11-21 11:45 2019-08-26 Show GitHub Exploit DB Packet Storm
267934 4.8 MEDIUM
Network
hyper hyper An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted. CWE-254
 7PK - Security Features
CVE-2016-10932 2024-11-21 11:45 2019-08-26 Show GitHub Exploit DB Packet Storm
267935 8.1 HIGH
Network
rust-openssl_project rust-openssl An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for host… CWE-295
Improper Certificate Validation 
CVE-2016-10931 2024-11-21 11:45 2019-08-26 Show GitHub Exploit DB Packet Storm
267936 5.3 MEDIUM
Network
advanced_ajax_page_loader_project advanced_ajax_page_loader The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10929 2024-11-21 11:45 2019-08-23 Show GitHub Exploit DB Packet Storm
267937 7.5 HIGH
Network
onelogin onelogin_saml_sso The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users. CWE-798
 Use of Hard-coded Credentials
CVE-2016-10928 2024-11-21 11:45 2019-08-23 Show GitHub Exploit DB Packet Storm
267938 9.8 CRITICAL
Network
wpsupportplus wp_support_plus_responsive_ticket_system The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number. CWE-20
 Improper Input Validation 
CVE-2016-10930 2024-11-21 11:45 2019-08-23 Show GitHub Exploit DB Packet Storm
267939 10.0 CRITICAL
Network
neliosoftware nelio_ab_testing The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2016-10927 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm
267940 10.0 CRITICAL
Network
neliosoftware nelio_ab_testing The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2016-10926 2024-11-21 11:45 2019-08-22 Show GitHub Exploit DB Packet Storm