Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241641	2.6	注意	eZ	-	eZ JS Core におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1597	2012-08-20 16:20	2012-05-9	Show	GitHub Exploit DB Packet Storm

241642	4.3	警告	ヒューレット・パッカード	-	HP Service Manager Web Tier および HP Service Center Web Tier におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3251	2012-08-20 16:10	2012-08-13	Show	GitHub Exploit DB Packet Storm

241643	5	警告	ヒューレット・パッカード	-	HP Service Manager Server および HP Service Center Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3250	2012-08-20 16:09	2012-08-13	Show	GitHub Exploit DB Packet Storm

241644	4	警告	ヒューレット・パッカード	-	HP Fortify Software Security Center における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3249	2012-08-20 16:08	2012-08-13	Show	GitHub Exploit DB Packet Storm

241645	5	警告	ヒューレット・パッカード	-	HP Fortify Software Security Center における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3248	2012-08-20 16:07	2012-08-13	Show	GitHub Exploit DB Packet Storm

241646	4.9	警告	ヒューレット・パッカード	-	HP Integrity Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3247	2012-08-20 16:06	2012-08-13	Show	GitHub Exploit DB Packet Storm

241647	5	警告	Tridium	-	Tridium Niagara AX Framework のデフォルト設定における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-3025	2012-08-20 16:03	2012-08-15	Show	GitHub Exploit DB Packet Storm

241648	5	警告	Tridium	-	Tridium Niagara AX Framework における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2012-3024	2012-08-20 16:00	2012-08-15	Show	GitHub Exploit DB Packet Storm

241649	8.5	危険	シーメンス	-	Siemens COMOS におけるデータベースの管理者権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3009	2012-08-20 15:59	2012-08-10	Show	GitHub Exploit DB Packet Storm

241650	5.5	警告	Iomega DELL EMC (旧 EMC Corporation)	-	複数の Iomega 製品の EMC Lifeline ファームウェアにおけるデータを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2012-2283	2012-08-20 15:57	2012-08-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269361	5.4	MEDIUM Network	fedoraproject opensuse phpmyadmin	fedora leap opensuse phpmyadmin	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script…	CWE-79 Cross-site Scripting	CVE-2016-2040	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

269362	5.3	MEDIUM Network	opensuse phpmyadmin fedoraproject	leap opensuse phpmyadmin fedora	libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass int…	CWE-200 Information Exposure	CVE-2016-2039	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

269363	5.3	MEDIUM Network	phpmyadmin fedoraproject opensuse	phpmyadmin fedora leap opensuse	phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error…	CWE-200 Information Exposure	CVE-2016-2038	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

269364	7.5	HIGH Network	phpmyadmin	phpmyadmin	The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easie…	CWE-255 CWE-254 Credentials Management 7PK - Security Features	CVE-2016-1927	2024-11-21 11:47	2016-02-20	Show	GitHub Exploit DB Packet Storm

269365	5.9	MEDIUM Network	hp	hp-ux_ipfilter	HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets.	CWE-20 Improper Input Validation	CVE-2016-1987	2024-11-21 11:47	2016-02-19	Show	GitHub Exploit DB Packet Storm

269366	6.1	MEDIUM Network	citrix	netscaler	The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.130…	CWE-254 7PK - Security Features	CVE-2016-2072	2024-11-21 11:47	2016-02-18	Show	GitHub Exploit DB Packet Storm

269367	9.8	CRITICAL Network	citrix	netscaler	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to g…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2071	2024-11-21 11:47	2016-02-18	Show	GitHub Exploit DB Packet Storm

269368	6.1	MEDIUM Network	sophos	unified_threat_management_software	Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.	CWE-79 Cross-site Scripting	CVE-2016-2046	2024-11-21 11:47	2016-02-18	Show	GitHub Exploit DB Packet Storm

269369	8.8	HIGH Network	mozilla	firefox	Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site tha…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-1949	2024-11-21 11:47	2016-02-13	Show	GitHub Exploit DB Packet Storm

269370	6.5	MEDIUM Network	xmlsoft debian canonical	libxml2 debian_linux ubuntu_linux	The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2073	2024-11-21 11:47	2016-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed