Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242531 4.3 警告 Infoblox - Infoblox NetMRI の netmri/config/userAdmin/login.tdf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5178 2012-09-21 15:28 2011-10-18 Show GitHub Exploit DB Packet Storm
242532 4.3 警告 eSyndiCat - eSyndiCat Pro の admin/controller.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5177 2012-09-21 15:27 2012-09-20 Show GitHub Exploit DB Packet Storm
242533 5 警告 WizOne Solutions - Drupal 用 Fill PDF モジュールにおける任意の PDF ファイルを書かれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5007 2012-09-21 15:01 2012-01-4 Show GitHub Exploit DB Packet Storm
242534 6.8 警告 Database Publishing Consultants - Drupal 用 Admin:hover モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1631 2012-09-21 15:01 2012-01-11 Show GitHub Exploit DB Packet Storm
242535 2.1 注意 Nestor Mata Cuthbert - Drupal 用 Taxonomy Navigator モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1630 2012-09-21 15:00 2012-01-11 Show GitHub Exploit DB Packet Storm
242536 2.1 注意 Dmitry Loac - Drupal 用 Taxotouch モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1629 2012-09-21 15:00 2012-01-11 Show GitHub Exploit DB Packet Storm
242537 3.5 注意 63reasons - Drupal 用 SuperCron モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1628 2012-09-21 14:59 2012-01-11 Show GitHub Exploit DB Packet Storm
242538 6 警告 Karen Stevenson - Drupal 用 Date モジュールのイベントの変更フォームにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1626 2012-09-21 14:59 2012-01-11 Show GitHub Exploit DB Packet Storm
242539 6 警告 WizOne Solutions - Drupal 用 Fill PDF モジュールの fillpdf.admin.inc における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-1625 2012-09-21 14:58 2012-01-4 Show GitHub Exploit DB Packet Storm
242540 6.8 警告 Erik Webb - Drupal 用 Password Policy モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1633 2012-09-21 14:58 2012-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267041 5.4 MEDIUM
Network
ibm websphere_application_server IBM WebSphere Application Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting
CVE-2016-8934 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267042 6.1 MEDIUM
Network
ibm web_content_manager_production_analytics
websphere_portal
Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to… CWE-79
Cross-site Scripting
CVE-2016-8922 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267043 8.8 HIGH
Network
ibm filenet_workplace_xt IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2016-8921 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267044 5.4 MEDIUM
Network
ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended funct… CWE-79
Cross-site Scripting
CVE-2016-8920 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267045 5.9 MEDIUM
Network
ibm integration_bus IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials. CWE-255
Credentials Management
CVE-2016-8918 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267046 6.5 MEDIUM
Network
ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequenc… CWE-22
Path Traversal
CVE-2016-8913 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267047 4.3 MEDIUM
Network
ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be read by an authenticated user. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2016-8912 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267048 5.4 MEDIUM
Network
ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could… CWE-254
 7PK - Security Features
CVE-2016-8911 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267049 8.6 HIGH
Network
cisco asa_cx_context-aware_security_software A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module could allow an unauthenticated, remote attacker to cause the CX m… CWE-399
 Resource Management Errors
CVE-2016-9225 2024-11-21 12:00 2017-02-2 Show GitHub Exploit DB Packet Storm
267050 5.4 MEDIUM
Network
tenable nessus Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to handling of .nessus files. CWE-79
Cross-site Scripting
CVE-2016-9260 2024-11-21 12:00 2017-02-1 Show GitHub Exploit DB Packet Storm