Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242451	4.9	警告	ヒューレット・パッカード	-	HP Integrity Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3247	2012-08-20 16:06	2012-08-13	Show	GitHub Exploit DB Packet Storm

242452	5	警告	Tridium	-	Tridium Niagara AX Framework のデフォルト設定における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-3025	2012-08-20 16:03	2012-08-15	Show	GitHub Exploit DB Packet Storm

242453	5	警告	Tridium	-	Tridium Niagara AX Framework における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2012-3024	2012-08-20 16:00	2012-08-15	Show	GitHub Exploit DB Packet Storm

242454	8.5	危険	シーメンス	-	Siemens COMOS におけるデータベースの管理者権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3009	2012-08-20 15:59	2012-08-10	Show	GitHub Exploit DB Packet Storm

242455	5.5	警告	Iomega DELL EMC (旧 EMC Corporation)	-	複数の Iomega 製品の EMC Lifeline ファームウェアにおけるデータを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2012-2283	2012-08-20 15:57	2012-08-16	Show	GitHub Exploit DB Packet Storm

242456	4.3	警告	Tom Braider	-	WordPress 用 Count Per Day モジュールの userperspan.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3434	2012-08-20 15:53	2012-07-13	Show	GitHub Exploit DB Packet Storm

242457	5	警告	Mike Peachey	-	RT 用 Authen::ExternalAuth エクステンションにおけるログインセッションを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2770	2012-08-20 15:45	2012-07-25	Show	GitHub Exploit DB Packet Storm

242458	4.3	警告	Jesse Vincent	-	RT 用 Extension::MobileUI エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2769	2012-08-20 15:42	2012-07-25	Show	GitHub Exploit DB Packet Storm

242459	4.3	警告	Best Practical Solutions	-	RT 用 RTFM エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2768	2012-08-20 15:40	2012-07-25	Show	GitHub Exploit DB Packet Storm

242460	7.5	危険	Bharat Mediratta	-	Gallery における任意の PHP コードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-4343	2012-08-20 12:17	2012-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269371	7.8	HIGH Local	gimp	gimp	Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a…	CWE-416 Use After Free	CVE-2016-4994	2024-11-21 11:53	2016-07-13	Show	GitHub Exploit DB Packet Storm

269372	7.5	HIGH Network	redhat canonical	openstack openstack_ironic	The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge…	CWE-200 Information Exposure	CVE-2016-4985	2024-11-21 11:53	2016-07-13	Show	GitHub Exploit DB Packet Storm

269373	7.8	HIGH Local	linecorp	line line_installer	Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.	NVD-CWE-Other	CVE-2016-4831	2024-11-21 11:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

269374	7.5	HIGH Network	apache	http_server	The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allow…	CWE-284 Improper Access Control	CVE-2016-4979	2024-11-21 11:53	2016-07-6	Show	GitHub Exploit DB Packet Storm

269375	6.1	MEDIUM Network	phpmyadmin opensuse	phpmyadmin opensuse	Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mish…	CWE-79 Cross-site Scripting	CVE-2016-5099	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

269376	5.3	MEDIUM Network	phpmyadmin opensuse	phpmyadmin opensuse	Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.	CWE-22 Path Traversal	CVE-2016-5098	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

269377	5.3	MEDIUM Network	opensuse phpmyadmin	opensuse phpmyadmin	phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by readin…	CWE-200 Information Exposure	CVE-2016-5097	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

269378	7.5	HIGH Network	ntp oracle novell suse opensuse	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse	ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.	CWE-476 NULL Pointer Dereference	CVE-2016-4957	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

269379	5.3	MEDIUM Network	ntp oracle novell suse opensuse siemens	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware	ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists beca…	NVD-CWE-noinfo	CVE-2016-4956	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

269380	5.9	MEDIUM Network	ntp oracle novell suse opensuse siemens	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware	ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packe…	CWE-362 Race Condition	CVE-2016-4955	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed