Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241101	5.1	警告	Nextide	-	Drupal 用の filedepot モジュールにおける脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2719	2012-06-29 10:39	2012-05-30	Show	GitHub Exploit DB Packet Storm

241102	4.3	警告	Jason Moore	-	Drupal 用の Amadou テーマモジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2715	2012-06-29 10:37	2012-05-30	Show	GitHub Exploit DB Packet Storm

241103	6.8	警告	Isaac Sukin	-	Drupal 用の BrowserID モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2713	2012-06-29 10:35	2012-05-23	Show	GitHub Exploit DB Packet Storm

241104	2.6	注意	Thomas Seidl	-	Drupal 用の Search API モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2712	2012-06-29 10:29	2012-05-23	Show	GitHub Exploit DB Packet Storm

241105	2.1	注意	Nancy Wichmann	-	Drupal 用 Taxonomy List モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2711	2012-06-29 10:25	2012-05-23	Show	GitHub Exploit DB Packet Storm

241106	2.6	注意	John Albin Wilkins	-	Drupal 用 Zen モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2710	2012-06-29 10:13	2012-05-16	Show	GitHub Exploit DB Packet Storm

241107	2.1	注意	Aegir project	-	Drupal 用 Hostmaster モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2708	2012-06-29 10:11	2012-05-16	Show	GitHub Exploit DB Packet Storm

241108	5.8	警告	Aegir project	-	Drupal 用 Hostmaster モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2707	2012-06-29 10:10	2012-05-16	Show	GitHub Exploit DB Packet Storm

241109	4.3	警告	Peter Pokrivcak	-	Drupal 用 Post Affiliate Pro モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2706	2012-06-29 10:09	2012-05-16	Show	GitHub Exploit DB Packet Storm

241110	2.1	注意	Christopher M. Mitchell	-	Drupal 用 Smart Breadcrumb モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-20 不適切な入力確認	CVE-2012-2705	2012-06-29 10:07	2012-05-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266871	9.8	CRITICAL Network	windriver siemens	vxworks sgt-100_firmware sgt-200_firmware sgt-300_firmware sgt-400_firmware sgt-a20_firmware sgt-a35_firmware sgt-a65_firmware	A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer	CWE-787 Out-of-bounds Write	CVE-2016-20009	2024-11-21 11:47	2021-03-12	Show	GitHub Exploit DB Packet Storm

266872	9.8	CRITICAL Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-863 Incorrect Authorization	CVE-2016-20005	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266873	9.8	CRITICAL Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-863 Incorrect Authorization	CVE-2016-20004	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266874	7.5	HIGH Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	NVD-CWE-Other	CVE-2016-20003	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266875	9.8	CRITICAL Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-863 Incorrect Authorization	CVE-2016-20002	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266876	9.8	CRITICAL Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-863 Incorrect Authorization	CVE-2016-20001	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266877	7.5	HIGH Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	NVD-CWE-Other	CVE-2016-20008	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266878	7.5	HIGH Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-613 Insufficient Session Expiration	CVE-2016-20007	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266879	7.5	HIGH Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows blockage of user logins, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	NVD-CWE-noinfo	CVE-2016-20006	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

266880	7.5	HIGH Network	arubanetworks	arubaos aruba_instant airwave	A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain…	CWE-287 Improper Authentication	CVE-2016-2032	2024-11-21 11:47	2020-02-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed