Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242501	6.4	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-2279	2012-07-18 10:57	2012-07-13	Show	GitHub Exploit DB Packet Storm

242502	4.3	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2278	2012-07-18 10:56	2012-07-13	Show	GitHub Exploit DB Packet Storm

242503	4.3	警告	CKEditor Team	-	FCKeditor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4000	2012-07-17 16:44	2012-07-12	Show	GitHub Exploit DB Packet Storm

242504	4.3	警告	Sayak Banerjee	-	Sticky Notes の admin/login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3999	2012-07-17 16:43	2012-07-12	Show	GitHub Exploit DB Packet Storm

242505	7.5	危険	Sayak Banerjee	-	Sticky Notes における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-3998	2012-07-17 16:43	2012-07-12	Show	GitHub Exploit DB Packet Storm

242506	4.3	警告	Sayak Banerjee	-	Sticky Notes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3997	2012-07-17 16:42	2012-07-12	Show	GitHub Exploit DB Packet Storm

242507	6.8	警告	VideoLAN	-	VideoLAN VLC media player の OGG demuxer におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3377	2012-07-17 16:36	2012-05-2	Show	GitHub Exploit DB Packet Storm

242508	6.8	警告	Wafer	-	Webmatic の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-3350	2012-07-17 16:35	2012-07-12	Show	GitHub Exploit DB Packet Storm

242509	9.3	危険	Esri	-	ESRI ArcMap および ArcGI における任意の VBA コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-1661	2012-07-17 16:29	2012-07-12	Show	GitHub Exploit DB Packet Storm

242510	6.8	警告	eXtplorer	-	eXtplorer におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-3362	2012-07-17 16:27	2012-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266291	4.3	MEDIUM Adjacent	nutspace	nut_mobile	The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.	CWE-287 Improper Authentication	CVE-2016-6549	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266292	9.8	CRITICAL Network	nutspace	nut_mobile	The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th…	CWE-200 Information Exposure	CVE-2016-6548	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266293	7.8	HIGH Local	nutspace	nut_mobile	The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6547	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266294	7.8	HIGH Local	kkmcn	itrackeasy	The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6546	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266295	9.8	CRITICAL Network	ieasytec	itrackeasy	Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this …	CWE-384 Session Fixation	CVE-2016-6545	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266296	7.5	HIGH Network	ieasytec	itrack_easy	getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.	CWE-287 Improper Authentication	CVE-2016-6544	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266297	5.9	MEDIUM Network	ieasytec	itrack_easy	A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device.	CWE-284 Improper Access Control	CVE-2016-6543	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266298	3.7	LOW Network	ieasytec	itrackeasy	The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address.	CWE-20 Improper Input Validation	CVE-2016-6542	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266299	9.8	CRITICAL Network	shdesigns	resident_download_manager	SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applica…	CWE-20 Improper Input Validation	CVE-2016-6567	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266300	8.1	HIGH Network	infinixauthority bluproducts xolo beeline iku-mobile leagoo doogee	hot_x507_firmware hot_2_x510_firmware zero_x506_firmware zero_2_x509_firmware studio_g_firmware studio_g_plus_firmware studio_6.0_hd_firmware studio_x_firmware studio_x_plus_f…	Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this bina…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-6564	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed