Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242571	3.5	注意	Authoring HTML	-	Drupal 用の Authoring HTML モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2725	2012-06-29 10:49	2012-06-6	Show	GitHub Exploit DB Packet Storm

242572	2.6	注意	Nextide	-	Drupal 用の Maestro モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2723	2012-06-29 10:48	2012-06-6	Show	GitHub Exploit DB Packet Storm

242573	4.3	警告	Scott Reynen	-	Drupal 用の Node Embed モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2722	2012-06-29 10:47	2012-06-6	Show	GitHub Exploit DB Packet Storm

242574	6.8	警告	Moshe Weitzman	-	Drupal 用の Organic Groups モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2721	2012-06-29 10:46	2012-06-6	Show	GitHub Exploit DB Packet Storm

242575	5	警告	Adam Ross	-	Drupal 用の Token Authentication モジュールにおける設定以上の権限を持つリクエストを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2720	2012-06-29 10:43	2012-06-6	Show	GitHub Exploit DB Packet Storm

242576	5.1	警告	Nextide	-	Drupal 用の filedepot モジュールにおける脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2719	2012-06-29 10:39	2012-05-30	Show	GitHub Exploit DB Packet Storm

242577	4.3	警告	Jason Moore	-	Drupal 用の Amadou テーマモジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2715	2012-06-29 10:37	2012-05-30	Show	GitHub Exploit DB Packet Storm

242578	6.8	警告	Isaac Sukin	-	Drupal 用の BrowserID モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2713	2012-06-29 10:35	2012-05-23	Show	GitHub Exploit DB Packet Storm

242579	2.6	注意	Thomas Seidl	-	Drupal 用の Search API モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2712	2012-06-29 10:29	2012-05-23	Show	GitHub Exploit DB Packet Storm

242580	2.1	注意	Nancy Wichmann	-	Drupal 用 Taxonomy List モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2711	2012-06-29 10:25	2012-05-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266641	7.5	HIGH Network	netgear nuuo	readynas_surveillance nvrsolo nvrmini_2	cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator passwo…	CWE-285 Improper Authorization	CVE-2016-5676	2024-11-21 11:54	2016-09-1	Show	GitHub Exploit DB Packet Storm

266642	9.8	CRITICAL Network	netgear nuuo	readynas_surveillance crystal nvrsolo nvrmini_2	handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remot…	CWE-20 Improper Input Validation	CVE-2016-5675	2024-11-21 11:54	2016-09-1	Show	GitHub Exploit DB Packet Storm

266643	9.8	CRITICAL Network	netgear nuuo	readynas_surveillance nvrmini_2 nvrsolo	__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbit…	CWE-20 Improper Input Validation	CVE-2016-5674	2024-11-21 11:54	2016-09-1	Show	GitHub Exploit DB Packet Storm

266644	9.8	CRITICAL Network	vmware	vrealize_automation	VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5336	2024-11-21 11:54	2016-08-31	Show	GitHub Exploit DB Packet Storm

266645	7.8	HIGH Local	vmware	identity_manager vrealize_automation	VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-5335	2024-11-21 11:54	2016-08-31	Show	GitHub Exploit DB Packet Storm

266646	9.8	CRITICAL Network	vmware	photon_os	VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.	CWE-798 Use of Hard-coded Credentials	CVE-2016-5333	2024-11-21 11:54	2016-08-31	Show	GitHub Exploit DB Packet Storm

266647	5.3	MEDIUM Network	vmware	vrealize_log_insight	Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors.	CWE-22 Path Traversal	CVE-2016-5332	2024-11-21 11:54	2016-08-31	Show	GitHub Exploit DB Packet Storm

266648	9.8	CRITICAL Network	google linux	android linux_kernel	Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause…	CWE-190 Integer Overflow or Wraparound	CVE-2016-5344	2024-11-21 11:54	2016-08-31	Show	GitHub Exploit DB Packet Storm

266649	7.8	HIGH Local	google linux	android linux_kernel	Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center …	CWE-787 Out-of-bounds Write	CVE-2016-5342	2024-11-21 11:54	2016-08-31	Show	GitHub Exploit DB Packet Storm

266650	6.1	MEDIUM Network	zimbra	zimbra_collaboration_server	Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-5721	2024-11-21 11:54	2016-08-30	Show	GitHub Exploit DB Packet Storm