Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241751 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3468 2012-08-14 16:43 2012-08-12 Show GitHub Exploit DB Packet Storm
241752 4.3 警告 Escon Information Consulting - ESCON SupportPortal Professional Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2590 2012-08-14 16:38 2012-08-12 Show GitHub Exploit DB Packet Storm
241753 4.3 警告 AfterLogic - AfterLogic MailSuite Pro におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2587 2012-08-14 16:37 2012-08-12 Show GitHub Exploit DB Packet Storm
241754 4.3 警告 Zoho Corporation - ManageEngine ServiceDesk Plus におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2585 2012-08-14 16:35 2012-08-12 Show GitHub Exploit DB Packet Storm
241755 4.3 警告 T-dah - T-dah WebMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2573 2012-08-14 16:34 2012-08-12 Show GitHub Exploit DB Packet Storm
241756 4.3 警告 WinWebMail - WinWebMail Servert におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2571 2012-08-14 16:33 2012-08-12 Show GitHub Exploit DB Packet Storm
241757 10 危険 Amazon.com, Inc. - Amazon Kindle Touch における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4249 2012-08-14 16:31 2012-08-12 Show GitHub Exploit DB Packet Storm
241758 9.3 危険 Amazon.com, Inc. - Amazon Kindle Touch における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4248 2012-08-14 16:30 2012-08-12 Show GitHub Exploit DB Packet Storm
241759 7.5 危険 Dir2web - Dir2web における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4070 2012-08-14 16:29 2012-08-12 Show GitHub Exploit DB Packet Storm
241760 5 警告 Dir2web - Dir2web におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4069 2012-08-14 16:26 2012-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266231 4.4 MEDIUM
Network 		phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the u… CWE-254
 7PK - Security Features 		CVE-2016-4412 2024-11-21 11:52 2016-12-11 Show GitHub Exploit DB Packet Storm
266232 7.5 HIGH
Network 		hp system_management_homepage HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4396 2024-11-21 11:52 2016-10-29 Show GitHub Exploit DB Packet Storm
266233 7.5 HIGH
Network 		hp system_management_homepage HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4395 2024-11-21 11:52 2016-10-29 Show GitHub Exploit DB Packet Storm
266234 6.5 MEDIUM
Network 		hp system_management_homepage HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue. CWE-254
 7PK - Security Features 		CVE-2016-4394 2024-11-21 11:52 2016-10-29 Show GitHub Exploit DB Packet Storm
266235 5.4 MEDIUM
Network 		hp system_management_homepage HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue. CWE-79
Cross-site Scripting 		CVE-2016-4393 2024-11-21 11:52 2016-10-29 Show GitHub Exploit DB Packet Storm
266236 6.5 MEDIUM
Network 		sap sapcryptolib The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors, aka S… CWE-284
Improper Access Control 		CVE-2016-4407 2024-11-21 11:52 2016-10-13 Show GitHub Exploit DB Packet Storm
266237 7.5 HIGH
Network 		sap netweaver
sap_aba
sap_basis 		The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the … CWE-284
Improper Access Control 		CVE-2016-4551 2024-11-21 11:52 2016-10-6 Show GitHub Exploit DB Packet Storm
266238 8.1 HIGH
Network 		hp keyview The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-… NVD-CWE-noinfo
CVE-2016-4390 2024-11-21 11:52 2016-10-5 Show GitHub Exploit DB Packet Storm
266239 8.1 HIGH
Network 		hp keyview The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-… NVD-CWE-noinfo
CVE-2016-4389 2024-11-21 11:52 2016-10-5 Show GitHub Exploit DB Packet Storm
266240 8.1 HIGH
Network 		hp keyview The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-… NVD-CWE-noinfo
CVE-2016-4388 2024-11-21 11:52 2016-10-5 Show GitHub Exploit DB Packet Storm