Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242311 5 警告 MediaWiki - MediaWiki のリソースローダにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1579 2012-09-12 13:44 2012-03-21 Show GitHub Exploit DB Packet Storm
242312 6.8 警告 MediaWiki - MediaWiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1578 2012-09-12 13:43 2012-03-21 Show GitHub Exploit DB Packet Storm
242313 4.6 警告 ヒューレット・パッカード - HP Business Availability Center における Web セッションをハイジャックされる脆弱性 CWE-noinfo
情報不足 		CVE-2012-3257 2012-09-12 11:18 2012-09-6 Show GitHub Exploit DB Packet Storm
242314 6.8 警告 ヒューレット・パッカード - HP Business Availability Center におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-3256 2012-09-12 11:17 2012-09-6 Show GitHub Exploit DB Packet Storm
242315 4.3 警告 ヒューレット・パッカード - HP Business Availability Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3255 2012-09-12 11:17 2012-09-6 Show GitHub Exploit DB Packet Storm
242316 7.5 危険 Honeywell International Inc. - 複数の Honeywell 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0254 2012-09-12 11:16 2012-09-7 Show GitHub Exploit DB Packet Storm
242317 7.5 危険 OpenEMR - OpenEMR の interface/login/validateUser.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2115 2012-09-12 10:05 2012-09-9 Show GitHub Exploit DB Packet Storm
242318 6.8 警告 OpenEMR - OpenEMR における任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5161 2012-09-12 10:03 2012-09-9 Show GitHub Exploit DB Packet Storm
242319 4.3 警告 OpenEMR - OpenEMR の setup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5160 2012-09-12 10:02 2012-09-9 Show GitHub Exploit DB Packet Storm
242320 4.3 警告 Geeklog - Geeklog の admin/configuration.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5159 2012-09-12 10:00 2011-01-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265961 7.5 HIGH
Network 		b2evolution b2evolution The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request. CWE-255
Credentials Management 		CVE-2016-9479 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
265962 8.6 HIGH
Network 		s9y serendipity In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2016-9752 2024-11-21 12:01 2016-12-1 Show GitHub Exploit DB Packet Storm
265963 6.1 MEDIUM
Network 		piwigo piwigo Cross-site scripting (XSS) vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2016-9751 2024-11-21 12:01 2016-12-1 Show GitHub Exploit DB Packet Storm
265964 7.5 HIGH
Network 		boa boa Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters. CWE-20
 Improper Input Validation  		CVE-2016-9564 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
265965 9.8 CRITICAL
Network 		exponentcms exponent_cms In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is defined in the expCommentControllercontr… CWE-89
SQL Injection 		CVE-2016-9481 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
265966 9.1 CRITICAL
Network 		libdwarf_project libdwarf libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9480 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
265967 7.8 HIGH
Local 		linux linux_kernel The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9644 2024-11-21 12:01 2016-11-28 Show GitHub Exploit DB Packet Storm
265968 9.8 CRITICAL
Network 		linux linux_kernel The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-… CWE-125
Out-of-bounds Read 		CVE-2016-9555 2024-11-21 12:01 2016-11-28 Show GitHub Exploit DB Packet Storm
265969 6.5 MEDIUM
Network 		drupal drupal The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL. CWE-20
 Improper Input Validation  		CVE-2016-9452 2024-11-21 12:01 2016-11-26 Show GitHub Exploit DB Packet Storm
265970 6.8 MEDIUM
Network 		drupal drupal Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors. CWE-601
Open Redirect 		CVE-2016-9451 2024-11-21 12:01 2016-11-26 Show GitHub Exploit DB Packet Storm