Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241411 3.5 注意 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0746 2012-09-12 16:16 2012-09-4 Show GitHub Exploit DB Packet Storm
241412 6.5 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0728 2012-09-12 16:15 2012-09-4 Show GitHub Exploit DB Packet Storm
241413 6.5 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0727 2012-09-12 16:13 2012-09-4 Show GitHub Exploit DB Packet Storm
241414 6.8 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-0714 2012-09-12 16:12 2012-09-4 Show GitHub Exploit DB Packet Storm
241415 6.8 警告 OpenKM - OpenKM におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2316 2012-09-12 14:20 2012-01-4 Show GitHub Exploit DB Packet Storm
241416 4 警告 OpenKM - OpenKM における任意のユーザに管理者権限を割り当てられる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2315 2012-09-12 14:19 2012-01-4 Show GitHub Exploit DB Packet Storm
241417 4.3 警告 chatelao - PHP Address Book の preferences.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1912 2012-09-12 13:54 2012-09-9 Show GitHub Exploit DB Packet Storm
241418 7.5 危険 chatelao - PHP Address Book における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1911 2012-09-12 13:53 2012-09-9 Show GitHub Exploit DB Packet Storm
241419 4.9 警告 danielb - Drupal 用 Cool Aid モジュールにおける任意のページを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1649 2012-09-12 13:53 2012-02-29 Show GitHub Exploit DB Packet Storm
241420 2.1 注意 danielb - Drupal 用 Cool Aid モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1648 2012-09-12 13:52 2012-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266061 6.1 MEDIUM
Network 		mantisbt mantisbt Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-beta1, 1.3.0-beta1 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2016-6837 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
266062 7.5 HIGH
Network 		call-cc chicken The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exh… CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-6831 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
266063 9.8 CRITICAL
Network 		call-cc chicken The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6830 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
266064 7.5 HIGH
Network 		python hpack
hyper 		A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. T… CWE-399
 Resource Management Errors 		CVE-2016-6581 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
266065 7.5 HIGH
Network 		python python_priority_library A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every p… CWE-399
 Resource Management Errors 		CVE-2016-6580 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
266066 6.5 MEDIUM
Network 		docker docker The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions. NOTE: the vendor dis… CWE-399
 Resource Management Errors 		CVE-2016-6595 2024-11-21 11:56 2017-01-5 Show GitHub Exploit DB Packet Storm
266067 4.3 MEDIUM
Network 		sap hybris Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace. CWE-200
Information Exposure 		CVE-2016-6859 2024-11-21 11:56 2016-12-31 Show GitHub Exploit DB Packet Storm
266068 5.4 MEDIUM
Network 		sap hybris Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.1.0.x before 5.1.0.11, 5.1.1.x before 5.1.1.12, 5.2.0.x and… CWE-79
Cross-site Scripting 		CVE-2016-6858 2024-11-21 11:56 2016-12-31 Show GitHub Exploit DB Packet Storm
266069 5.4 MEDIUM
Network 		sap hybris Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5.3.x before 5.3.0.11, 5.4.x before 5.4.0.11, 5.5.0.x before… CWE-79
Cross-site Scripting 		CVE-2016-6857 2024-11-21 11:56 2016-12-31 Show GitHub Exploit DB Packet Storm
266070 6.1 MEDIUM
Network 		sap hybris Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting 		CVE-2016-6856 2024-11-21 11:56 2016-12-31 Show GitHub Exploit DB Packet Storm