Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243381	7.5	危険	ジョンソンコントロールズ	-	Johnson Controls CK721-A コントローラのファームウェアにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-2607	2012-07-18 16:37	2012-07-16	Show	GitHub Exploit DB Packet Storm

243382	5	警告	Tridium	-	Tridium Niagara AX Framework におけるディレクトリトラバーサルの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4027	2012-07-18 11:49	2012-07-13	Show	GitHub Exploit DB Packet Storm

243383	4.3	警告	ヒューレット・パッカード	-	HP AssetManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2021	2012-07-18 11:39	2012-07-12	Show	GitHub Exploit DB Packet Storm

243384	5	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance における任意の Web スクリプトを挿入される脆弱性	CWE-Other その他	CVE-2012-2280	2012-07-18 10:58	2012-07-13	Show	GitHub Exploit DB Packet Storm

243385	6.4	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-2279	2012-07-18 10:57	2012-07-13	Show	GitHub Exploit DB Packet Storm

243386	4.3	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2278	2012-07-18 10:56	2012-07-13	Show	GitHub Exploit DB Packet Storm

243387	4.3	警告	CKEditor Team	-	FCKeditor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4000	2012-07-17 16:44	2012-07-12	Show	GitHub Exploit DB Packet Storm

243388	4.3	警告	Sayak Banerjee	-	Sticky Notes の admin/login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3999	2012-07-17 16:43	2012-07-12	Show	GitHub Exploit DB Packet Storm

243389	7.5	危険	Sayak Banerjee	-	Sticky Notes における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-3998	2012-07-17 16:43	2012-07-12	Show	GitHub Exploit DB Packet Storm

243390	4.3	警告	Sayak Banerjee	-	Sticky Notes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3997	2012-07-17 16:42	2012-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268721	7.5	HIGH Network	debian opensuse libgd canonical	debian_linux leap libgd ubuntu_linux	The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application cras…	CWE-20 Improper Input Validation	CVE-2016-6128	2024-11-21 11:55	2016-08-7	Show	GitHub Exploit DB Packet Storm

268722	5.5	MEDIUM Local	linux oracle	linux_kernel linux vm_server	The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service…	CWE-284 Improper Access Control	CVE-2016-6198	2024-11-21 11:55	2016-08-7	Show	GitHub Exploit DB Packet Storm

268723	5.5	MEDIUM Local	oracle linux	linux linux_kernel vm_server	fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing,…	CWE-20 Improper Input Validation	CVE-2016-6197	2024-11-21 11:55	2016-08-7	Show	GitHub Exploit DB Packet Storm

268724	7.8	HIGH Local	linux	linux_kernel	The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor …	CWE-264 CWE-119 Permissions, Privileges, and Access Controls Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-6187	2024-11-21 11:55	2016-08-7	Show	GitHub Exploit DB Packet Storm

268725	7.8	HIGH Local	linux	linux_kernel	net/core/skbuff.c in the Linux kernel 4.7-rc6 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via certain IPv6 socket operations.	CWE-20 Improper Input Validation	CVE-2016-6162	2024-11-21 11:55	2016-08-7	Show	GitHub Exploit DB Packet Storm

268726	5.1	MEDIUM Local	linux	linux_kernel	Race condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in the Linux kernel before 4.7 allows local users to cause a denial of service (out-of-bounds array access…	CWE-362 Race Condition	CVE-2016-6156	2024-11-21 11:55	2016-08-7	Show	GitHub Exploit DB Packet Storm

268727	4.7	MEDIUM Local	linux	linux_kernel	Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call …	CWE-362 Race Condition	CVE-2016-6136	2024-11-21 11:55	2016-08-7	Show	GitHub Exploit DB Packet Storm

268728	6.1	MEDIUM Network	debian djangoproject	debian_linux django	Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, an…	CWE-79 Cross-site Scripting	CVE-2016-6186	2024-11-21 11:55	2016-08-6	Show	GitHub Exploit DB Packet Storm

268729	9.8	CRITICAL Network	sap	hana	The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restrictions and possibly have unspecified ot…	CWE-284 Improper Access Control	CVE-2016-6150	2024-11-21 11:55	2016-08-5	Show	GitHub Exploit DB Packet Storm

268730	5.5	MEDIUM Local	sap	hana_sps09	SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941.	CWE-200 Information Exposure	CVE-2016-6149	2024-11-21 11:55	2016-08-5	Show	GitHub Exploit DB Packet Storm