Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241821 7.5 危険 Apache Software Foundation - Apache Hadoop の DataNode における任意のブロックを読まれる脆弱性 CWE-310
暗号の問題 		CVE-2012-3376 2012-07-17 15:57 2012-07-12 Show GitHub Exploit DB Packet Storm
241822 3.6 注意 suckless.org - slock における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1620 2012-07-17 15:45 2012-07-12 Show GitHub Exploit DB Packet Storm
241823 7.5 危険 Tiki Software Community Association - TikiWiki CMS/Groupware における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0911 2012-07-17 15:43 2012-07-12 Show GitHub Exploit DB Packet Storm
241824 9.3 危険 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2012-2844 2012-07-17 11:22 2012-07-11 Show GitHub Exploit DB Packet Storm
241825 9.3 危険 マイクロソフト - Microsoft Windows のシェルにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0175 2012-07-13 16:19 2012-07-10 Show GitHub Exploit DB Packet Storm
241826 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1522 2012-07-13 16:18 2012-07-10 Show GitHub Exploit DB Packet Storm
241827 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1524 2012-07-13 16:17 2012-07-10 Show GitHub Exploit DB Packet Storm
241828 6.9 警告 マイクロソフト - 複数の Microsoft 製品の VBE6.dll における権限昇格の脆弱性 CWE-Other
その他 		CVE-2012-1854 2012-07-13 16:15 2012-07-10 Show GitHub Exploit DB Packet Storm
241829 4.3 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1859 2012-07-13 16:13 2012-07-10 Show GitHub Exploit DB Packet Storm
241830 5.5 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1860 2012-07-13 16:13 2012-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269011 5.9 MEDIUM
Network 		electron-packager_project electron-packager electron-packager is a command line tool that packages Electron source code into `.app` and `.exe` packages. along with Electron. The `--strict-ssl` command line option in electron-packager >= 5.2.1 … CWE-295
Improper Certificate Validation  		CVE-2016-10534 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269012 6.1 MEDIUM
Network 		marked_project marked marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content i… CWE-79
Cross-site Scripting 		CVE-2016-10531 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269013 5.9 MEDIUM
Network 		airbrake airbrake The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could… CWE-310
CWE-200
Cryptographic Issues
Information Exposure 		CVE-2016-10530 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269014 8.8 HIGH
Network 		droppy_project droppy Droppy versions <3.5.0 does not perform any verification for cross-domain websocket requests. An attacker is able to make a specially crafted page that can send requests as the context of the current… CWE-352
 Origin Validation Error 		CVE-2016-10529 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269015 4.9 MEDIUM
Network 		restafary_project restafary restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it … CWE-22
Path Traversal 		CVE-2016-10528 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269016 8.8 HIGH
Network 		express-restify-mongoose_project express-restify-mongoose express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send… CWE-200
Information Exposure 		CVE-2016-10533 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269017 9.8 CRITICAL
Network 		console-io_project console-io console-io is a module that allows users to implement a web console in their application. A malicious user could bypass the authentication and execute any command that the user who is running the con… CWE-287
Improper Authentication 		CVE-2016-10532 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269018 7.5 HIGH
Network 		riot.js riot-compiler The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions. CWE-399
 Resource Management Errors 		CVE-2016-10527 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269019 8.6 HIGH
Network 		grunt-gh-pages_project grunt-gh-pages A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth part of the url. In module versions < 0.9.1 the auth portion… CWE-255
CWE-532
Credentials Management
 Inclusion of Sensitive Information in Log Files 		CVE-2016-10526 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
269020 8.2 HIGH
Network 		i18n-node-angular_project i18n-node-angular i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not … CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-10524 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm