Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240681 6.8 警告 Erik Webb - Drupal 用 Password Policy モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1633 2012-09-21 14:58 2012-01-11 Show GitHub Exploit DB Packet Storm
240682 2.1 注意 Erik Webb - Drupal 用 Password Policy モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1632 2012-09-21 14:57 2012-01-11 Show GitHub Exploit DB Packet Storm
240683 3.5 注意 Marco Villegas - Drupal 用 Vote Up/Down モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1627 2012-09-21 14:52 2012-01-11 Show GitHub Exploit DB Packet Storm
240684 2.1 注意 Alquimia - Drupal 用 Managesite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1640 2012-09-21 14:52 2012-01-25 Show GitHub Exploit DB Packet Storm
240685 6 警告 Dominique CLAUSE - Drupal 用 Search Autocomplete モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1638 2012-09-21 14:51 2012-01-25 Show GitHub Exploit DB Packet Storm
240686 3.5 注意 CollectiveColors - Drupal 用 Taxonomy Views Integrator モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1653 2012-09-21 14:35 2012-02-29 Show GitHub Exploit DB Packet Storm
240687 2.1 注意 Wim Leers - Drupal 用 Hierarchical Select モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1652 2012-09-21 14:34 2012-02-29 Show GitHub Exploit DB Packet Storm
240688 3.5 注意 ThinkLeft - Drupal 用 Submenu Tree モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1651 2012-09-21 14:34 2012-02-29 Show GitHub Exploit DB Packet Storm
240689 6.8 警告 リコー - Ricoh DC Software DL-10 の SR10 FTP サーバーにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5002 2012-09-21 12:16 2012-09-19 Show GitHub Exploit DB Packet Storm
240690 7.5 危険 blueteck - deV!L'z Clanportal 用 Witze アドオンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5000 2012-09-21 12:15 2012-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266841 7.5 HIGH
Network
ibm urbancode_deploy IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine. CWE-284
Improper Access Control
CVE-2016-2942 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266842 5.5 MEDIUM
Local
ibm urbancode_deploy IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user. CWE-200
Information Exposure
CVE-2016-2941 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266843 5.4 MEDIUM
Network
ibm biginsights IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted UR… CWE-79
Cross-site Scripting
CVE-2016-2924 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266844 7.8 HIGH
Local
ibm aix IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-3053 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266845 2.7 LOW
Network
ibm security_access_manager_for_web_8.0_firmware
security_access_manager_for_mobile
security_access_manager_9.0_firmware
IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end da… CWE-89
SQL Injection
CVE-2016-3046 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266846 3.7 LOW
Network
ibm security_access_manager
security_access_manager_for_mobile
security_access_manager_for_web
IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer he… CWE-200
Information Exposure
CVE-2016-3045 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266847 5.9 MEDIUM
Network
ibm security_access_manager_for_web_7.0_firmware
security_access_manager_for_web_8.0_firmware
security_access_manager_for_mobile
security_access_manager_9.0_firmware
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit t… CWE-200
Information Exposure
CVE-2016-3043 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266848 5.3 MEDIUM
Network
ibm security_appscan_source IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server. CWE-200
Information Exposure
CVE-2016-3035 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266849 4.4 MEDIUM
Local
ibm security_appscan_source IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily. CWE-326
Inadequate Encryption Strength
CVE-2016-3034 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266850 8.8 HIGH
Network
ibm security_access_manager_9.0_firmware
security_access_manager_for_mobile_8.0_firmware
security_access_manager_for_web_8.0_firmware
IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tr… CWE-352
 Origin Validation Error
CVE-2016-3029 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm