Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242351 4 警告 Moodle - Moodle の question-bank 機能における機能制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2356 2012-07-24 15:52 2012-07-21 Show GitHub Exploit DB Packet Storm
242352 4 警告 Moodle - Moodle における question:use* 機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2355 2012-07-24 15:51 2012-07-21 Show GitHub Exploit DB Packet Storm
242353 4 警告 Moodle - Moodle における moodle/site:readallmessages 機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2354 2012-07-24 15:50 2012-07-21 Show GitHub Exploit DB Packet Storm
242354 4 警告 Moodle - Moodle における非表示フィールドから重要なユーザ情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2353 2012-07-24 15:46 2012-07-21 Show GitHub Exploit DB Packet Storm
242355 7.5 危険 Nullsoft - Winamp の bmp.w5s におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4045 2012-07-24 15:38 2012-06-28 Show GitHub Exploit DB Packet Storm
242356 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3385 2012-07-24 15:38 2012-06-27 Show GitHub Exploit DB Packet Storm
242357 6.8 警告 WordPress.org - WordPress のカスタマイザにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-3384 2012-07-24 15:37 2012-06-27 Show GitHub Exploit DB Packet Storm
242358 2.6 注意 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3383 2012-07-24 15:36 2012-06-27 Show GitHub Exploit DB Packet Storm
242359 2.6 注意 フェンリル株式会社 - Sleipnir Mobile for Android における WebView クラスに関する脆弱性 CWE-Other
その他 		CVE-2012-2646 2012-07-24 12:02 2012-07-24 Show GitHub Exploit DB Packet Storm
242360 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるアドレスバーを偽造される脆弱性 CWE-Other
その他 		CVE-2012-0479 2012-07-23 17:58 2012-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266251 9.8 CRITICAL
Network 		huawei uma Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109. CWE-94
Code Injection 		CVE-2016-7110 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266252 9.8 CRITICAL
Network 		huawei uma Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110. CWE-94
Code Injection 		CVE-2016-7109 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266253 6.5 MEDIUM
Network 		huawei uma Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors. CWE-200
Information Exposure 		CVE-2016-7108 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266254 7.5 HIGH
Network 		huawei uma Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-7107 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266255 6.6 MEDIUM
Local 		huawei e9000_chassis XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary fi… CWE-284
Improper Access Control 		CVE-2016-6898 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266256 5.5 MEDIUM
Local 		huawei rh1288_v3_server_firmware
rh2288_v3_server_firmware
rh2288h_v3_server_firmware
xh620_v3_server_firmware
xh622_v3_server_firmware
xh628_v3_server_firmware
rh5885_v3_server_firmware 		The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers… CWE-399
 Resource Management Errors 		CVE-2016-6900 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266257 7.5 HIGH
Network 		huawei rh5885_v3_server_firmware
rh1288_v3_server_firmware
rh2288_v3_server_firmware
rh2288h_v3_server_firmware
xh620_v3_server_firmware
xh622_v3_server_firmware
xh628_v3_server_firmware 		The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers… CWE-310
CWE-200
Cryptographic Issues
Information Exposure 		CVE-2016-6899 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266258 7.5 HIGH
Network 		f5 big-ip_local_traffic_manager
big-ip_webaccelerator
big-ip_application_acceleration_manager
big-ip_global_traffic_manager
big-ip_link_controller
big-ip_advanced_firewall_manager
big-… 		The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP A… CWE-399
 Resource Management Errors 		CVE-2016-6876 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266259 8.8 HIGH
Network 		redhat jboss_bpm_suite The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to… CWE-352
 Origin Validation Error 		CVE-2016-7034 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm
266260 6.1 MEDIUM
Network 		redhat jboss_bpm_suite Multiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified ve… CWE-79
Cross-site Scripting 		CVE-2016-7033 2024-11-21 11:57 2016-09-8 Show GitHub Exploit DB Packet Storm