Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242371 3.5 注意 Apache Software Foundation - Apache Roller におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2381 2012-06-27 11:20 2012-06-26 Show GitHub Exploit DB Packet Storm
242372 9.3 危険 Apache Software Foundation - Apache Roller の admin/editor コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2380 2012-06-27 11:18 2012-06-26 Show GitHub Exploit DB Packet Storm
242373 5.8 警告 nicholas thompson - Drupal 用の Global Redirect モジュールにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2021 2012-06-27 11:09 2012-06-13 Show GitHub Exploit DB Packet Storm
242374 4.3 警告 アドビシステムズ
日立		 - Adobe RoboHelp Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0523 2012-06-27 11:05 2009-02-24 Show GitHub Exploit DB Packet Storm
242375 4.3 警告 アドビシステムズ
日立		 - Adobe RoboHelp によって作成されたファイルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0642 2012-06-27 11:02 2008-02-12 Show GitHub Exploit DB Packet Storm
242376 4.3 警告 Webmin Project - Webmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1937 2012-06-27 10:56 2011-05-31 Show GitHub Exploit DB Packet Storm
242377 5.1 警告 ターボリナックス
ImageMagick
レッドハット
オラクル		 - ImageMagick における不正な Sun Rasterfile ファイルによるヒープオーバーフローの脆弱性 - CVE-2006-3744 2012-06-27 10:50 2006-08-14 Show GitHub Exploit DB Packet Storm
242378 6.8 警告 galeriashqip - GaleriaSHQIP の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3207 2012-06-26 16:19 2010-09-3 Show GitHub Exploit DB Packet Storm
242379 7.5 危険 diy-cms - DiY-CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3206 2012-06-26 16:19 2010-09-3 Show GitHub Exploit DB Packet Storm
242380 9.3 危険 アドビシステムズ - Adobe Captivate における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3191 2012-06-26 16:19 2010-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266401 8.1 HIGH
Network 		oracle
fedoraproject
hp
php
redhat
debian
opensuse
drupal 		enterprise_manager_ops_center
communications_user_data_repository
linux
fedora
storeever_msl6480_tape_library_firmware
system_management_homepage
php
enterprise_linux_desktop
… 		PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY envi… CWE-601
Open Redirect 		CVE-2016-5385 2024-11-21 11:54 2016-07-19 Show GitHub Exploit DB Packet Storm
266402 8.8 HIGH
Network 		accela civic_platform_citizen_access_portal Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and … CWE-284
Improper Access Control 		CVE-2016-5661 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm
266403 6.1 MEDIUM
Network 		accela civic_platform Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid paramet… CWE-79
Cross-site Scripting 		CVE-2016-5660 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm
266404 8.8 HIGH
Network 		libbpg_project libbpg The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5637 2024-11-21 11:54 2016-07-16 Show GitHub Exploit DB Packet Storm
266405 5.5 MEDIUM
Local 		symantec client_intrusion_detection_system The Client Intrusion Detection System (CIDS) driver before 15.0.6 in Symantec Endpoint Protection (SEP) and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service (memo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5308 2024-11-21 11:54 2016-07-12 Show GitHub Exploit DB Packet Storm
266406 7.5 HIGH
Network 		opensuse
phpmyadmin 		leap
opensuse
phpmyadmin 		The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, … CWE-200
Information Exposure 		CVE-2016-5739 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
266407 9.8 CRITICAL
Network 		phpmyadmin phpmyadmin phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote… CWE-94
Code Injection 		CVE-2016-5734 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
266408 6.1 MEDIUM
Network 		phpmyadmin
opensuse 		phpmyadmin
leap
opensuse 		Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2016-5733 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
266409 6.1 MEDIUM
Network 		phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before … CWE-79
Cross-site Scripting 		CVE-2016-5732 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm
266410 6.1 MEDIUM
Network 		phpmyadmin
opensuse 		phpmyadmin
leap
opensuse 		Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web scr… CWE-79
Cross-site Scripting 		CVE-2016-5731 2024-11-21 11:54 2016-07-3 Show GitHub Exploit DB Packet Storm