Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240671 4.3 警告 Skysa - WordPress 用 Skysa App Bar Integration プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5179 2012-09-21 15:28 2012-09-20 Show GitHub Exploit DB Packet Storm
240672 4.3 警告 Infoblox - Infoblox NetMRI の netmri/config/userAdmin/login.tdf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5178 2012-09-21 15:28 2011-10-18 Show GitHub Exploit DB Packet Storm
240673 4.3 警告 eSyndiCat - eSyndiCat Pro の admin/controller.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5177 2012-09-21 15:27 2012-09-20 Show GitHub Exploit DB Packet Storm
240674 5 警告 WizOne Solutions - Drupal 用 Fill PDF モジュールにおける任意の PDF ファイルを書かれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5007 2012-09-21 15:01 2012-01-4 Show GitHub Exploit DB Packet Storm
240675 6.8 警告 Database Publishing Consultants - Drupal 用 Admin:hover モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1631 2012-09-21 15:01 2012-01-11 Show GitHub Exploit DB Packet Storm
240676 2.1 注意 Nestor Mata Cuthbert - Drupal 用 Taxonomy Navigator モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1630 2012-09-21 15:00 2012-01-11 Show GitHub Exploit DB Packet Storm
240677 2.1 注意 Dmitry Loac - Drupal 用 Taxotouch モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1629 2012-09-21 15:00 2012-01-11 Show GitHub Exploit DB Packet Storm
240678 3.5 注意 63reasons - Drupal 用 SuperCron モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1628 2012-09-21 14:59 2012-01-11 Show GitHub Exploit DB Packet Storm
240679 6 警告 Karen Stevenson - Drupal 用 Date モジュールのイベントの変更フォームにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1626 2012-09-21 14:59 2012-01-11 Show GitHub Exploit DB Packet Storm
240680 6 警告 WizOne Solutions - Drupal 用 Fill PDF モジュールの fillpdf.admin.inc における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-1625 2012-09-21 14:58 2012-01-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266751 8.2 HIGH
Network
oracle crm_technical_foundation Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address … NVD-CWE-noinfo
CVE-2016-3437 2024-11-21 11:50 2016-04-21 Show GitHub Exploit DB Packet Storm
266752 8.2 HIGH
Network
oracle common_applications_calendar Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity vi… NVD-CWE-noinfo
CVE-2016-3436 2024-11-21 11:50 2016-04-21 Show GitHub Exploit DB Packet Storm
266753 4.7 MEDIUM
Network
oracle peoplesoft_enterprise_peopletools Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to P… NVD-CWE-noinfo
CVE-2016-3435 2024-11-21 11:50 2016-04-21 Show GitHub Exploit DB Packet Storm
266754 4.7 MEDIUM
Network
oracle application_object_library Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors rela… NVD-CWE-noinfo
CVE-2016-3434 2024-11-21 11:50 2016-04-21 Show GitHub Exploit DB Packet Storm
266755 8.2 HIGH
Network
oracle configurator Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors… NVD-CWE-noinfo
CVE-2016-3438 2024-11-21 11:50 2016-04-21 Show GitHub Exploit DB Packet Storm
266756 8.8 HIGH
Network
tibco enterprise_message_service_appliance_firmware
enterprise_message_service
Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possib… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3628 2024-11-21 11:50 2016-04-20 Show GitHub Exploit DB Packet Storm
266757 6.5 MEDIUM
Network
dotcms dotcms SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr. CWE-200
Information Exposure
CVE-2016-3688 2024-11-21 11:50 2016-04-19 Show GitHub Exploit DB Packet Storm
266758 7.8 HIGH
Local
watchguard panda_endpoint_administration_agent Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which al… CWE-276
Incorrect Default Permissions 
CVE-2016-3943 2024-11-21 11:50 2016-04-19 Show GitHub Exploit DB Packet Storm
266759 5.5 MEDIUM
Local
videolan
canonical
vlc_media_player
ubuntu_linux
Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, rela… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3941 2024-11-21 11:50 2016-04-19 Show GitHub Exploit DB Packet Storm
266760 5.9 MEDIUM
Network
f5 big-ip_edge_gateway
big-ip_access_policy_manager
The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain sensitive SessionId information by levera… CWE-200
Information Exposure
CVE-2016-3686 2024-11-21 11:50 2016-04-14 Show GitHub Exploit DB Packet Storm