Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243241	6.8	警告	WordPress.org	-	WordPress のカスタマイザにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-3384	2012-07-24 15:37	2012-06-27	Show	GitHub Exploit DB Packet Storm

243242	2.6	注意	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3383	2012-07-24 15:36	2012-06-27	Show	GitHub Exploit DB Packet Storm

243243	2.6	注意	フェンリル株式会社	-	Sleipnir Mobile for Android における WebView クラスに関する脆弱性	CWE-Other その他	CVE-2012-2646	2012-07-24 12:02	2012-07-24	Show	GitHub Exploit DB Packet Storm

243244	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるアドレスバーを偽造される脆弱性	CWE-Other その他	CVE-2012-0479	2012-07-23 17:58	2012-04-24	Show	GitHub Exploit DB Packet Storm

243245	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の texImage2D の実装における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0478	2012-07-23 17:57	2012-04-24	Show	GitHub Exploit DB Packet Storm

243246	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0477	2012-07-23 17:57	2012-04-24	Show	GitHub Exploit DB Packet Storm

243247	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品の docshell の実装におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0474	2012-07-23 17:56	2012-04-24	Show	GitHub Exploit DB Packet Storm

243248	5	警告	Mozilla Foundation	-	複数の Mozilla 製品の WebGLBuffer::FindMaxUshortElement 関数における重要な情報を取得される脆弱性	CWE-189 数値処理の問題	CVE-2012-0473	2012-07-23 17:56	2012-04-24	Show	GitHub Exploit DB Packet Storm

243249	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0471	2012-07-23 17:56	2012-04-24	Show	GitHub Exploit DB Packet Storm

243250	10	危険	Mozilla Foundation	-	複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0470	2012-07-23 17:55	2012-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267711	7.5	HIGH Network	imagely	nextgen_gallery	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user t…	CWE-20 Improper Input Validation	CVE-2016-6565	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267712	7.5	HIGH Adjacent	mitel	shortel_mobility_client	On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position …	CWE-295 Improper Certificate Validation	CVE-2016-6562	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267713	9.8	CRITICAL Network	synology	ds107_firmware ds213_firmware ds116_firmware	Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A re…	CWE-255 Credentials Management	CVE-2016-6554	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267714	9.8	CRITICAL Network	nuuo	nt-4040_titan_firmware	Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulne…	CWE-255 Credentials Management	CVE-2016-6553	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267715	9.8	CRITICAL Network	greenpacket	dx-350_firmware	Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device.	CWE-255 Credentials Management	CVE-2016-6552	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267716	9.8	CRITICAL Network	intelliantech	v60_firmware v60ka_firmware v65_firmware v80g_firmware t80w_firmware t80q_firmware t100w_firmware t100q_firmware t110w_firmware t110q_firmware t130w_firmware t130q_fi…	Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access…	CWE-255 Credentials Management	CVE-2016-6551	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267717	4.3	MEDIUM Adjacent	nutspace	nut_mobile	The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.	CWE-287 Improper Authentication	CVE-2016-6549	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267718	9.8	CRITICAL Network	nutspace	nut_mobile	The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th…	CWE-200 Information Exposure	CVE-2016-6548	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267719	7.8	HIGH Local	nutspace	nut_mobile	The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6547	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

267720	7.8	HIGH Local	kkmcn	itrackeasy	The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6546	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed