Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243231	3.5	注意	Moodle	-	Moodle の Wiki サブシステムにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2360	2012-07-24 16:05	2012-07-21	Show	GitHub Exploit DB Packet Storm

243232	6.5	警告	Moodle	-	Moodle の admin/roles/override.php における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2359	2012-07-24 16:03	2012-07-21	Show	GitHub Exploit DB Packet Storm

243233	5.5	警告	Moodle	-	Moodle におけるアクティビティの読み取り専用の状態を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2358	2012-07-24 16:00	2012-07-21	Show	GitHub Exploit DB Packet Storm

243234	5	警告	Moodle	-	Moodle の auth/cas/cas_form.html 内のマルチ認証機能における資格情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-2357	2012-07-24 15:54	2012-07-21	Show	GitHub Exploit DB Packet Storm

243235	4	警告	Moodle	-	Moodle の question-bank 機能における機能制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2356	2012-07-24 15:52	2012-07-21	Show	GitHub Exploit DB Packet Storm

243236	4	警告	Moodle	-	Moodle における question:use* 機能の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2355	2012-07-24 15:51	2012-07-21	Show	GitHub Exploit DB Packet Storm

243237	4	警告	Moodle	-	Moodle における moodle/site:readallmessages 機能の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2354	2012-07-24 15:50	2012-07-21	Show	GitHub Exploit DB Packet Storm

243238	4	警告	Moodle	-	Moodle における非表示フィールドから重要なユーザ情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-2353	2012-07-24 15:46	2012-07-21	Show	GitHub Exploit DB Packet Storm

243239	7.5	危険	Nullsoft	-	Winamp の bmp.w5s におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4045	2012-07-24 15:38	2012-06-28	Show	GitHub Exploit DB Packet Storm

243240	5	警告	WordPress.org	-	WordPress における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3385	2012-07-24 15:38	2012-06-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267711	7.5	HIGH Network	imagely	nextgen_gallery	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user t…	CWE-20 Improper Input Validation	CVE-2016-6565	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267712	7.5	HIGH Adjacent	mitel	shortel_mobility_client	On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position …	CWE-295 Improper Certificate Validation	CVE-2016-6562	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267713	9.8	CRITICAL Network	synology	ds107_firmware ds213_firmware ds116_firmware	Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A re…	CWE-255 Credentials Management	CVE-2016-6554	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267714	9.8	CRITICAL Network	nuuo	nt-4040_titan_firmware	Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulne…	CWE-255 Credentials Management	CVE-2016-6553	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267715	9.8	CRITICAL Network	greenpacket	dx-350_firmware	Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device.	CWE-255 Credentials Management	CVE-2016-6552	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267716	9.8	CRITICAL Network	intelliantech	v60_firmware v60ka_firmware v65_firmware v80g_firmware t80w_firmware t80q_firmware t100w_firmware t100q_firmware t110w_firmware t110q_firmware t130w_firmware t130q_fi…	Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access…	CWE-255 Credentials Management	CVE-2016-6551	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267717	4.3	MEDIUM Adjacent	nutspace	nut_mobile	The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.	CWE-287 Improper Authentication	CVE-2016-6549	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267718	9.8	CRITICAL Network	nutspace	nut_mobile	The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th…	CWE-200 Information Exposure	CVE-2016-6548	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267719	7.8	HIGH Local	nutspace	nut_mobile	The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6547	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267720	7.8	HIGH Local	kkmcn	itrackeasy	The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6546	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed