Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241891	5	警告	IBM	-	IBM WAS の HTTP サーバで使用される IBM Global Security Kit におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2012-2190	2012-08-22 16:51	2012-08-6	Show	GitHub Exploit DB Packet Storm

241892	4	警告	ヒューレット・パッカード	-	HP Virtual SAN Appliance 上で稼働する HP SAN/iQ におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-4362	2012-08-22 16:50	2012-08-20	Show	GitHub Exploit DB Packet Storm

241893	7.7	危険	ヒューレット・パッカード	-	HP Virtual SAN Appliance 上で稼働する HP SAN/iQ における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-4361	2012-08-22 16:48	2012-08-20	Show	GitHub Exploit DB Packet Storm

241894	7.8	危険	ヒューレット・パッカード	-	HP Serviceguard におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3252	2012-08-22 16:47	2012-08-15	Show	GitHub Exploit DB Packet Storm

241895	7.7	危険	ヒューレット・パッカード	-	HP Virtual SAN Appliance 上で稼働する HP SAN/iQ における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-2986	2012-08-22 16:46	2012-08-20	Show	GitHub Exploit DB Packet Storm

241896	2.1	注意	Tecnick.com	-	TCExam の admin/code/tce_edit_answer.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4238	2012-08-22 16:44	2012-08-6	Show	GitHub Exploit DB Packet Storm

241897	6.8	警告	Tecnick.com	-	TCExam における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4237	2012-08-22 16:43	2012-08-6	Show	GitHub Exploit DB Packet Storm

241898	4.3	警告	Jease	-	Jease におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4052	2012-08-22 16:42	2012-08-20	Show	GitHub Exploit DB Packet Storm

241899	4.3	警告	Total Shop UK	-	Total Shop UK eCommerce Open Source におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4236	2012-08-22 16:40	2012-08-20	Show	GitHub Exploit DB Packet Storm

241900	4.9	警告	OpenStack	-	OpenStack Compute (Nova) の virt/disk/api.py における任意のファイルを上書される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3447	2012-08-22 16:34	2012-07-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265901	6.1	MEDIUM Network	plone	plone	z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted GET request.	CWE-79 Cross-site Scripting	CVE-2016-7136	2024-11-21 11:57	2017-03-8	Show	GitHub Exploit DB Packet Storm

265902	4.9	MEDIUM Network	plone	plone	Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. (dot dot) in the path parameter in a getFile ac…	CWE-22 Path Traversal	CVE-2016-7135	2024-11-21 11:57	2017-03-8	Show	GitHub Exploit DB Packet Storm

265903	9.8	CRITICAL Network	nefarious2_project	nefarious2	The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE paramet…	CWE-287 Improper Authentication	CVE-2016-7145	2024-11-21 11:57	2017-03-8	Show	GitHub Exploit DB Packet Storm

265904	5.5	MEDIUM Local	dropbear_ssh_project	dropbear_ssh	The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident.	CWE-200 Information Exposure	CVE-2016-7409	2024-11-21 11:57	2017-03-4	Show	GitHub Exploit DB Packet Storm

265905	8.8	HIGH Network	dropbear_ssh_project	dropbear_ssh	The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.	CWE-284 Improper Access Control	CVE-2016-7408	2024-11-21 11:57	2017-03-4	Show	GitHub Exploit DB Packet Storm

265906	9.8	CRITICAL Network	dropbear_ssh_project	dropbear_ssh	The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.	CWE-20 Improper Input Validation	CVE-2016-7407	2024-11-21 11:57	2017-03-4	Show	GitHub Exploit DB Packet Storm

265907	9.8	CRITICAL Network	dropbear_ssh_project	dropbear_ssh	Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.	CWE-20 Improper Input Validation	CVE-2016-7406	2024-11-21 11:57	2017-03-4	Show	GitHub Exploit DB Packet Storm

265908	6.5	MEDIUM Network	matrixssl	matrixssl	TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted message.	CWE-125 Out-of-bounds Read	CVE-2016-6884	2024-11-21 11:57	2017-03-4	Show	GitHub Exploit DB Packet Storm

265909	5.9	MEDIUM Network	matrixssl	matrixssl	MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack.	CWE-200 Information Exposure	CVE-2016-6883	2024-11-21 11:57	2017-03-4	Show	GitHub Exploit DB Packet Storm

265910	5.9	MEDIUM Network	matrixssl	matrixssl	MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.	CWE-200 CWE-320 Information Exposure Key Management Errors	CVE-2016-6882	2024-11-21 11:57	2017-03-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed