Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241721 4.3 警告 Arbor Networks - Arbor Networks Peakflow SP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4685 2012-08-31 15:24 2012-08-28 Show GitHub Exploit DB Packet Storm
241722 6.8 警告 Gajim.org - Gajim の common/helpers.py における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-2085 2012-08-31 15:22 2011-11-4 Show GitHub Exploit DB Packet Storm
241723 6 警告 Giant Robot - Drupal 用 ZipCart モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1650 2012-08-31 15:05 2012-02-29 Show GitHub Exploit DB Packet Storm
241724 4.3 警告 MediaFront - Drupal 用 MediaFront モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1647 2012-08-31 15:02 2012-02-29 Show GitHub Exploit DB Packet Storm
241725 2.6 注意 Wim Leers - Drupal 用 CDN モジュールにおける任意の PHP ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2012-1645 2012-08-31 14:57 2012-02-15 Show GitHub Exploit DB Packet Storm
241726 2.1 注意 Gizra - Drupal 用 Organic Groups Vocabulary モジュールにおけるボキャブラリを改ざんされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1644 2012-08-31 14:53 2012-02-15 Show GitHub Exploit DB Packet Storm
241727 5 警告 Jason Savino - Drupal 用 Faster Permissions モジュールにおけるアクセス権を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1643 2012-08-31 14:50 2012-02-15 Show GitHub Exploit DB Packet Storm
241728 5 警告 YAML for Drupal - Drupal 用 Link checker モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1642 2012-08-31 14:48 2012-02-15 Show GitHub Exploit DB Packet Storm
241729 6 警告 danielb - Drupal 用 Finder モジュールの finder_import 関数における任意の PHP コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1641 2012-08-31 14:45 2012-02-8 Show GitHub Exploit DB Packet Storm
241730 6.4 警告 Rik de Boer - Drupal 用 revisioning モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1635 2012-08-31 14:41 2012-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266061 7.5 HIGH
Network
huawei uma Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors. CWE-284
Improper Access Control
CVE-2016-7107 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266062 6.6 MEDIUM
Local
huawei e9000_chassis XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary fi… CWE-284
Improper Access Control
CVE-2016-6898 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266063 5.5 MEDIUM
Local
huawei rh1288_v3_server_firmware
rh2288_v3_server_firmware
rh2288h_v3_server_firmware
xh620_v3_server_firmware
xh622_v3_server_firmware
xh628_v3_server_firmware
rh5885_v3_server_firmware
The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers… CWE-399
 Resource Management Errors
CVE-2016-6900 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266064 7.5 HIGH
Network
huawei rh5885_v3_server_firmware
rh1288_v3_server_firmware
rh2288_v3_server_firmware
rh2288h_v3_server_firmware
xh620_v3_server_firmware
xh622_v3_server_firmware
xh628_v3_server_firmware
The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers… CWE-310
CWE-200
Cryptographic Issues
Information Exposure
CVE-2016-6899 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266065 7.5 HIGH
Network
f5 big-ip_local_traffic_manager
big-ip_webaccelerator
big-ip_application_acceleration_manager
big-ip_global_traffic_manager
big-ip_link_controller
big-ip_advanced_firewall_manager
big-…
The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP A… CWE-399
 Resource Management Errors
CVE-2016-6876 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266066 8.8 HIGH
Network
redhat jboss_bpm_suite The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to… CWE-352
 Origin Validation Error
CVE-2016-7034 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266067 6.1 MEDIUM
Network
redhat jboss_bpm_suite Multiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified ve… CWE-79
Cross-site Scripting
CVE-2016-7033 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266068 5.3 MEDIUM
Network
microsoft
google
apple
opera
mozilla
edge
internet_explorer
chrome
safari
opera_browser
firefox
The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by lever… CWE-200
Information Exposure
CVE-2016-7153 2024-11-21 11:57 2016-09-6 Show GitHub Exploit DB Packet Storm
266069 5.3 MEDIUM
Network
opera
apple
mozilla
microsoft
google
opera
safari
firefox
edge
internet_explorer
chrome
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by levera… CWE-200
Information Exposure
CVE-2016-7152 2024-11-21 11:57 2016-09-6 Show GitHub Exploit DB Packet Storm
266070 8.8 HIGH
Network
siemens en100_ethernet_module_firmware A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.0… CWE-287
Improper Authentication
CVE-2016-7114 2024-11-21 11:57 2016-09-6 Show GitHub Exploit DB Packet Storm